An enterprise security team is reviewing mobile access configurations for employees who use personally owned mobile devices to access company cloud storage and email. The organization must enforce encrypted application-level data isolation to protect corporate files on these devices without taking full management control of the personal hardware or allowing full remote device wipes. Furthermore, mobile email clients must synchronize mail folders securely using IMAP over TLS/SSL rather than unencrypted protocols. Which TWO of the following configurations should the administrator deploy to satisfy these security and synchronization requirements? (Select TWO)
- Implement Mobile Application Management (MAM) policies to restrict corporate data storage within approved apps.Answer
- Configure incoming IMAP email synchronization over TCP port 993.Answer
- CEnroll all personal devices in a full Mobile Device Management (MDM) profile enforcing complete remote device wipes.
- DConfigure incoming mail synchronization using POP3 over TCP port 110 for real-time multi-device folder synchronization.
- ESet incoming mail synchronization to operate over TCP port 80 to establish SSL encryption.
Answer
Implement Mobile Application Management (MAM) policies to isolate corporate data at the app level, and configure incoming email synchronization using secure IMAP over TCP port 993.
Mobile Application Management (MAM) allows administrators to manage and isolate corporate applications and data without taking complete management control over personal devices or enabling full device wipes. In addition, IMAP over SSL/TLS uses TCP port 993 to securely synchronize mail folders across multiple client devices.
Step-by-Step Solution
Key Concept
Mobile Application Management (MAM) vs MDM scoping and secure IMAP protocol configuration.