Android and iOS Hacking CEH Practice Questions (Page 10)

Questions 46–50

1. 46expert · hard

   A company uses an MDM solution to manage both Android and iOS devices. The security team wants to test whether the MDM can prevent data leakage from a compromised device. Which MDM control is most effective in preventing data leakage from a rooted/jailbroken device?

   • ARemote wipe capability
   • BApp installation restrictions
   • CDevice passcode policy
   • DContainerization of corporate apps and data
   Reveal Solution Discussion Select an answer first
2. 47expert · hard · select all that apply

   You are conducting a security assessment of a mobile app that is available on both Android and iOS. The app uses HTTPS with certificate pinning, stores sensitive data locally, and uses a custom URL scheme for deep linking. You have rooted Android and jailbroken iOS test devices. Which of the following are appropriate steps for a comprehensive assessment? (Select all that apply.)

   • AUse a network proxy without bypassing pinning to capture all traffic.
   • BTest the URL scheme handler on both platforms for source validation and injection issues.
   • CPerform static analysis using jadx for Android and class-dump for iOS to identify insecure code patterns.
   • DOnly test the Android version because it is rooted and easier to analyze.
   • EUse Frida on both devices to bypass certificate pinning and intercept HTTPS traffic.
   Check answers Discussion Select an answer first
4. 48expert · hard

   You are analyzing an Android app that uses native code for cryptographic operations. The app also has a WebView that loads content from a remote server and enables JavaScript. You need to determine if the native library contains hardcoded secrets. Which of the following is the most effective approach?

   • AExtract the native library from the APK and use a disassembler like Ghidra or IDA Pro to analyze the binary for hardcoded strings and secrets.
   • BUse Frida to hook the native functions at runtime and dump their arguments and return values.
   • CUse APKTool to decode the resources and look for secrets in the XML files.
   • DUse jadx to decompile the Java code and look for the native method implementations.
   Reveal Solution Discussion Select an answer first
5. 49expert · hard

   A penetration tester is analyzing an Android app that uses a native library for license validation. The tester has decompiled the DEX code and found that the license check is performed in native code. The tester wants to bypass the license check without modifying the app's code. Which approach is most effective?

   • AUse Frida to hook the native function that returns the license status and force it to return a valid value
   • BUse jadx to decompile the native library and modify the Java code that calls it
   • CUse APKTool to decompile the native library and patch the assembly code
   • DUse a rooted device to directly modify the native library file on disk
   Reveal Solution Discussion Select an answer first
6. 50application · medium

   An Android app you are testing uses the device's root access to read a protected system file. The app is not a system app and is installed on a rooted device. The app also uses the Accessibility Service to read screen content. Which security control is most likely to be bypassed by the app's use of root access?

   • AThe SELinux policy that enforces mandatory access control on all processes.
   • BThe application framework's component isolation that prevents direct access to other apps' components.
   • CThe Android sandbox that restricts app access to other apps' data and system resources.
   • DThe permission system that requires runtime permissions for sensitive data.
   Reveal Solution Discussion Select an answer first