Question

Difficulty: HardMobile Application Support and Security Settings

A network administrator is establishing security baselines for employee-owned mobile devices accessing company email services. The organization's policy requires encrypted transmission for multi-device mailbox synchronization and strict isolation of corporate data without altering personal user content. Which TWO of the following configurations best meet these requirements?

  1. Configure incoming email retrieval using IMAP over SSL/TLS on TCP port 993 to enable multi-device folder synchronization.Answer
  2. Enforce Mobile Application Management (MAM) containerization policies to restrict corporate data sharing and enable selective data wiping.Answer
  3. C
    Configure incoming email retrieval using unencrypted POP3 on TCP port 110 to reduce SSL/TLS handshake processing overhead.
  4. D
    Apply full Mobile Device Management (MDM) profiles that mandate an automated remote factory wipe of the physical device upon policy non-compliance.

Answer

Configure incoming email retrieval using IMAP over SSL/TLS on TCP port 993 for multi-device synchronization, and enforce Mobile Application Management (MAM) containerization policies for selective corporate data wiping.
IMAP over SSL/TLS on TCP port 993 ensures secure, encrypted transmission of incoming messages while keeping mail folders synchronized across all endpoints. Implementing Mobile Application Management (MAM) containerization ensures corporate data is logically separated from personal apps on user-owned hardware, granting administrators the ability to execute selective wipes of corporate data without wiping personal photos or files.

Step-by-Step Solution

1
Analyze incoming email protocol and encryption port requirements.
IMAP over SSL/TLS uses TCP port 993 to securely retrieve mail while keeping folder states synchronized across desktop and mobile devices, unlike unencrypted POP3 on port 110.
Security policy demands encrypted transmission and multi-device synchronization.
2
Analyze enterprise mobile security and management scopes for BYOD environments.
Mobile Application Management (MAM) provides app-level containerization and selective wipe capabilities, preserving personal data while securing enterprise apps.
Full MDM device wipes are overly intrusive on personal devices and destroy non-corporate user data.

Key Concept

Mobile Application Security and Encrypted Email Protocol Settings
Rate this question