Question

Difficulty: Very hardMobile Application Support and Security Settings

An enterprise systems administrator is updating the mobile security baseline for corporate email and mobile application deployment across iOS and Android devices. Match each mobile security control or configuration setting on the left to its corresponding operational purpose or protocol scope on the right.

  • MAM ContainerizationIsolates enterprise application data and enables selective remote wipe on BYOD smartphones without affecting personal files.
  • Sideloading RestrictionsEnforces official app store installation policies to prevent unauthorized APK or IPA execution from untrusted sources.
  • SMTPS / STARTTLS ConfigurationSecures outbound corporate email transmission using port 587 or 465 with transport layer encryption.
  • Biometric MFA with Push AuthenticationCombines a physical device possession factor with fingerprint or facial recognition to validate user identity during app login.

Answer

MAM Containerization matches isolating enterprise data for selective wipe; Sideloading Restrictions matches blocking unverified app packages; SMTPS/STARTTLS matches securing outbound email via port 587/465; Biometric MFA matches combining device possession with biometrics.
Each security control aligns directly with its technical scope: MAM containerization manages enterprise app boundaries and selective wipe capabilities; sideloading prevention enforces installation strictly through trusted app marketplaces; SMTPS/STARTTLS secures outbound mail submission over encrypted TCP ports 587/465; and push-based biometric MFA combines hardware possession with biometric verification.

Step-by-Step Solution

1
Analyze the scope of MAM Containerization
Identified that MAM separates business data from personal storage, enabling selective wiping without affecting personal user files.
Containerization isolates enterprise app environments on personal smartphones.
2
Evaluate Sideloading Restrictions
Determined that preventing sideloading stops installation of application files (APK/IPA) from third-party or untrusted web sources.
Sideloading policies restrict app sources strictly to trusted, managed app stores.
3
Verify SMTPS and STARTTLS email transport settings
Matched outbound encrypted email transport to TCP ports 587 and 465.
SMTPS and STARTTLS wrap standard SMTP transmission in SSL/TLS encryption for secure message submission.
4
Confirm Biometric MFA with Push Notification capabilities
Matched MFA controls to combining something you have (registered phone) with something you are (biometrics).
Push notifications deliver verification prompts to the physical hardware while biometrics confirm user identity.

Key Concept

Mobile Application Security Settings and Email Synchronization Protocols
Rate this question