Question

Difficulty: MediumMobile Application Support and Security Settings

Match each mobile application support or operational scenario on the left with the most appropriate security control or configuration setting on the right.

  • An administrator needs to remove corporate data and emails from an employee's personal smartphone upon termination without impacting personal files.Selective Remote Wipe (MAM Containerization)
  • An IT team configures a mobile client to transmit outgoing encrypted emails securely using port 587.SMTP with Explicit TLS
  • A company policy blocks Android users from downloading and installing third-party application package (.apk) files from arbitrary web locations.Disabling Sideloading / Unknown Sources
  • An enterprise enforces policy adjustments and restricts sensitive app usage when a mobile device leaves company premises.Geofencing Control

Answer

Removing corporate data while preserving personal files matches Selective Remote Wipe (MAM Containerization); Outgoing encrypted email transmission over port 587 matches SMTP with Explicit TLS; Blocking third-party package installations matches Disabling Sideloading / Unknown Sources; Restricting app usage based on physical premises matches Geofencing Control.
Each requirement aligns directly with standard mobile device management controls: Selective wipe targets corporate containers on BYOD endpoints; SMTP over port 587 provides secure email dispatch; blocking unknown sources stops sideloading untrusted application packages; and geofencing applies policy restrictions based on physical device boundaries.

Step-by-Step Solution

1
Analyze BYOD data wiping requirements.
Selective Remote Wipe via MAM containerization erases corporate application workspace data while preserving user photos and personal applications.
Full remote device wipes clear all storage media back to factory defaults, which violates privacy standards on personal devices.
2
Identify the email transport protocol and security port.
Port 587 corresponds to secure outbound SMTP transmission utilizing explicit TLS.
IMAPS (port 993) and POP3S (port 995) handle incoming mail retrieval rather than outgoing mail transport.
3
Evaluate app installation controls.
Disabling sideloading prevents users from installing potentially malicious package files outside trusted app stores.
Sideloading bypasses app store inspection mechanisms and administrative software approval policies.
4
Evaluate location-based mobile access controls.
Geofencing applies administrative restrictions based on physical spatial boundaries.
Geofencing dynamically adjusts security postures based on current device coordinates.

Key Concept

Mobile Application Management (MAM), email synchronization protocols, sideloading restrictions, and geofencing controls.
Rate this question