Examkin

Question

Difficulty: HardMobile Application Support and Security Settings

A financial company permits employees to use their personal smartphones (BYOD) for work-related duties. The company's security policy requires that corporate emails and internal documents must be encrypted, isolated from personal applications, and prevented from being copied to unauthorized personal storage. Additionally, IT must maintain the ability to wipe corporate data selectively if an employee resigns, without modifying personal photos, apps, or settings. Which of the following administrative solutions should the technician implement to fulfill these security requirements?

  1. Enroll devices in a Mobile Application Management (MAM) solution using application containerizationAnswer
  2. B
    Enroll devices in full Mobile Device Management (MDM) and configure automated full device remote wipes
  3. C
    Configure corporate email access using POP3 over port 995 with SSL/TLS enabled
  4. D
    Restrict app data access by binding the device's cellular IMSI identifier to corporate firewall ACLs

Answer

Enroll devices in a Mobile Application Management (MAM) solution using application containerization.
Mobile Application Management (MAM) combined with containerization isolates enterprise applications into a secure, encrypted sandbox on the user's mobile device. This enforces data loss prevention policies (preventing copy/paste to personal apps) and allows administrators to execute selective wipes of corporate data without impacting the user's personal apps or data.

Step-by-Step Solution

1
Analyze the technical and compliance requirements
Identified the need to isolate corporate data from personal applications on employee-owned (BYOD) hardware and preserve personal content during offboarding.
BYOD environments require restricting administrative oversight to enterprise software containers rather than full hardware ownership.
2
Evaluate mobile administration frameworks
Mobile Application Management (MAM) with application containerization establishes a secure boundary around enterprise software.
Containerization blocks data leakage (e.g., copy-paste restrictions between corporate and personal apps) and enables selective wipes of corporate partition data only.
3
Differentiate MAM from MDM and protocol-level settings
MAM provides the granular scope necessary for BYOD, whereas MDM wipes the complete physical storage and POP3/IMSI settings provide no local data isolation.
Choosing MAM avoids privacy infringements associated with full MDM remote wipes while fulfilling data isolation requirements.

Key Concept

Mobile Application Management (MAM) vs. Mobile Device Management (MDM) Containerization
Estimated Time:1m 30s
Rate this question

Topics

Mobile Application Support and Security Settings

More questions from this topic