Examkin

Soru

Zorluk: Çok zorMobile Application Support and Security Settings

A corporate security administrator is establishing mobile access standards for employees using personal smartphones (BYOD) to handle sensitive company documents. Organizational policy mandates that corporate data must be logically separated from personal data, copy/paste functionality between corporate and personal applications must be disabled, and administrators must be capable of wiping corporate assets remotely without removing personal photos or personal applications. Additionally, the mobile email solution must support real-time two-way synchronization of emails, contacts, and calendar items across multiple devices. Which of the following solutions should the administrator implement to meet these requirements?

  1. Deploy a Mobile Application Management (MAM) solution utilizing containerization and data loss prevention policies, and configure email accounts using Exchange ActiveSync over TLS.Cevap
  2. B
    Enroll personal devices into a full Mobile Device Management (MDM) agent enforcing storage encryption, and issue full factory remote wipes during employee offboarding.
  3. C
    Implement Mobile Application Management (MAM) app wrapping, and configure corporate email accounts using POP3 over Port 995.
  4. D
    Restrict app execution by binding enterprise security certificates directly to the cellular IMEI and SIM IMSI numbers registered in the company database.

Cevap

Deploy a Mobile Application Management (MAM) solution utilizing containerization and data loss prevention policies, and configure email accounts using Exchange ActiveSync over TLS.
Mobile Application Management (MAM) provides containerization on personal (BYOD) devices to isolate corporate data from personal apps, prevent copy/paste leaks, and allow administrators to perform selective wipes of corporate data without wiping personal files. Exchange ActiveSync over TLS is the standard protocol for full, real-time two-way synchronization of email, contacts, and calendar data across endpoints.

Adım Adım Çözüm

1
Analyze BYOD policy constraints regarding remote wipe scope and data separation.
Determined that full device management (MDM) is inappropriate because personal data must remain untouched while corporate assets require isolation and selective wiping capabilities.
Mobile Application Management (MAM) isolates corporate apps inside an encrypted container on user-owned devices, allowing targeted corporate data wipes while preserving personal user data.
2
Evaluate data protection controls between application boundaries.
Containerization combined with MAM Data Loss Prevention (DLP) controls prevents data transfer (such as copy/paste or saving attachments) between corporate container applications and unmanaged personal applications.
App wrapping and container policies enforce boundary restrictions at the application execution layer.
3
Select the appropriate email protocol for full multi-object synchronization.
Selected Exchange ActiveSync over TLS.
Exchange ActiveSync supports real-time two-way synchronization of mail, contacts, and calendar items across multiple mobile endpoints, whereas legacy protocols like POP3 only retrieve inbox mail.

Anahtar Kavram

Mobile Application Management (MAM) containerization and selective wipe in BYOD environments, paired with Exchange ActiveSync protocol capabilities.
Bu soruyu puanla

Konular

Mobile Application Support and Security Settings

Bu konudan daha fazla soru