Which of the following is a common technique used to jailbreak an iOS device?

Installing an app from the App Store that unlocks the device

Exploiting a vulnerability in the kernel or a system service to gain root privileges

Using a hardware device to physically modify the Secure Enclave

Sending a malicious iMessage to the device

You are testing an iOS app that uses a custom URL scheme to handle authentication callbacks. The app also stores an authentication token in the iOS keychain. During testing, you discover that the URL scheme handler does not validate the source of the URL and that the keychain item is accessible to other apps signed with the same team ID. Which attack scenario is most realistic?

An attacker can directly read the keychain item from a remote server without any local app.

The keychain item can be extracted by jailbreaking the device, but the URL scheme is not a risk.

The URL scheme can be used to execute arbitrary code on the device by sending a crafted URL.

A malicious app registers the same URL scheme and intercepts the authentication callback, stealing the token.

EC-CouncilCertified Ethical Hacker

Domain 7Objective 2

Android and iOS Hacking CEH Practice Questions (Page 1)

Part of the Mobile, IoT and OT Hacking domain, which makes up ~11% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~10–18 in this domain), expect 2–4 from this objective — we provide 54 practice questions to prepare you well beyond it. (estimate)

54questions here

11free pages

12concepts

12 Concepts in This Objective

Android architecture and security model
Android app attack surface
Android reverse engineering
Android rooting and its security implications
Android exploitation techniques
iOS architecture and security model
iOS app attack surface
iOS reverse engineering
iOS jailbreaking and its security implications
iOS exploitation techniques
Mobile app security testing methodology
Mobile device management (MDM) and enterprise security

Questions 1–5

1foundation · easy
Which of the following is a common technique used to jailbreak an iOS device?
Select an answer first
2application · medium
You are testing an iOS app that uses a custom URL scheme to handle authentication callbacks. The app also stores an authentication token in the iOS keychain. During testing, you discover that the URL scheme handler does not validate the source of the URL and that the keychain item is accessible to other apps signed with the same team ID. Which attack scenario is most realistic?
Select an answer first
3foundation · easy
Which tool is used to extract Objective-C class information (such as class names, methods, and properties) from a Mach-O binary, aiding in static analysis of iOS apps?
Select an answer first
4foundation · easy
Which phase of a mobile app security assessment involves running the app on a device or emulator to observe its behavior, intercept network traffic, and test for runtime vulnerabilities?
Select an answer first
5foundation · easy
During dynamic analysis of an Android app, which tool allows an analyst to inject JavaScript or Python scripts into a running app to hook functions, trace calls, and manipulate behavior at runtime?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Android and iOS Hacking CEH Practice Questions (Page 1)

Questions 1–5

Which of the following is a common technique used to jailbreak an iOS device?

Which tool is used to extract Objective-C class information (such as class names, methods, and properties) from a Mach-O binary, aiding in static analysis of iOS apps?

Which phase of a mobile app security assessment involves running the app on a device or emulator to observe its behavior, intercept network traffic, and test for runtime vulnerabilities?

During dynamic analysis of an Android app, which tool allows an analyst to inject JavaScript or Python scripts into a running app to hook functions, trace calls, and manipulate behavior at runtime?

Keep studying — Mobile, IoT and OT Hacking