Mobile Device Security CCT Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A hospital issues tablets to nurses for accessing patient records. The tablets connect to the hospital Wi-Fi and also use cellular data when Wi-Fi is unavailable. Which configuration provides the strongest protection for patient data in transit?

   • AConfigure the tablets to use only cellular data and disable Wi-Fi to avoid insecure networks.
   • BUse WPA2 encryption on the hospital Wi-Fi and rely on cellular encryption for cellular data.
   • CRequire a VPN connection for all network traffic and disable direct internet access when not on VPN.
   • DInstall a firewall app on each tablet to filter traffic.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which of the following is a basic forensic technique used on mobile devices?

   • AInstalling new security patches
   • BResetting the device to factory settings
   • CDeleting suspicious files to clean the device
   • DCreating a bit-for-bit image of the device's storage
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A user reports that their Android phone has become slow, shows pop-up ads, and has an unfamiliar app that they did not install. The phone is not rooted. Which type of mobile threat is most likely affecting the device?

   • AA network-based man-in-the-middle attack on the Wi-Fi network.
   • BA SIM-swapping attack that redirected the user's phone number.
   • CA malicious app that was installed from an unofficial app store or via a phishing link.
   • DA firmware-level exploit that bypasses the OS security model.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A healthcare organization uses tablets to collect patient data in the field. The tablets are enrolled in MDM and have full-disk encryption enabled. A tablet is lost, and the organization needs to ensure that the data cannot be accessed. The tablet has a PIN lock and is encrypted. Which additional control would most effectively protect the data if the device falls into the wrong hands?

   • AIssue a remote wipe command to the tablet immediately.
   • BChange the user's password and revoke their access to the corporate network.
   • CContact the device manufacturer to remotely lock the device.
   • DRely on the full-disk encryption and PIN lock to prevent data access.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A developer is creating a mobile banking app that stores sensitive transaction data locally. The app must protect this data even if the device is rooted or jailbroken. Which combination of practices should the developer implement?

   • ADisable all logging and rely on the device's built-in encryption to secure local data.
   • BUse Android Keystore or iOS Keychain for encryption keys and implement certificate pinning for network connections.
   • CUse a custom encryption algorithm that is not publicly known to protect local data.
   • DStore encryption keys in shared preferences and rely on SSL/TLS for all data protection.
   Reveal Solution Discussion Select an answer first