A penetration tester finds that a company's login credentials for the email client were client being sent in clear text. Which of the following should be done to provide encrypted logins to the…

IPSec operates at the network layer to encrypt IP packets and is not the primary mechanism for securing application-layer email client logins, while SMTP is used for sending email, not for securing client login to retrieve mail.

SSH is primarily used for secure remote command-line access or tunneling, not typically for direct encryption of email client login communications, and LDAP credentials define the authentication source, not the transport encryption method.

MIME services define how to send various content types in email and do not provide encryption for login credentials, and enabling basic POP3 services alone does not inherently encrypt client logins.

IMAP (Internet Message Access Protocol) is a widely used protocol for email clients to access mailboxes on a server. Enabling an SSL/TLS certificate for IMAP services establishes an encrypted channel between the client and the server, ensuring that all communications, including login credentials, are transmitted securely over the network and are not exposed in clear text.