Soru

Zorluk: OrtaMobile Application Support and Security Settings

A healthcare organization issues mobile devices to field staff for viewing patient records and accessing corporate email. To comply with data privacy regulations, the IT security team must restrict the installation of unapproved software and ensure mobile email application data is encrypted in transit. Which TWO of the following configurations or administrative controls should the technician implement?

  1. Enforce mobile application management policies to prohibit app sideloading and restrict installation to the corporate app repository.Cevap
  2. Configure mobile email clients to use IMAPS over SSL/TLS port 993 for secure incoming mail synchronization.Cevap
  3. C
    Register the SIM card IMSI number on the mail server to validate encrypted email transport handshakes.
  4. D
    Configure POP3 over port 110 to enable multi-device folder and read-status synchronization across mobile endpoints.

Cevap

The technician should enforce mobile application management policies to prohibit app sideloading while restricting installations to a corporate repository, and configure mobile email clients to use IMAPS over SSL/TLS port 993 for secure incoming mail synchronization.
Enforcing application management policies prevents users from sideloading potentially harmful third-party applications outside approved enterprise software catalogs. Additionally, using IMAPS on secure port 993 ensures that incoming corporate email traffic is encrypted with SSL/TLS in transit, fulfilling data privacy requirements.

Adım Adım Çözüm

1
Identify the application security control needed to prevent unapproved software installation.
Disabling sideloading and enforcing corporate app store policies ensures only vetted apps run on the device.
Sideloading allows unverified applications from third-party sources to be installed, introducing malware risks.
2
Identify the secure mail protocol parameter for encrypted incoming synchronization.
Selecting IMAPS operating over port 993 establishes encrypted communication using SSL/TLS.
Standard unencrypted email protocols transmit credentials and message bodies in cleartext across wireless networks.

Anahtar Kavram

Mobile Application Security and Encrypted Synchronization Protocols
Tahmini Süre:1m 30s
Bu soruyu puanla