A company deploys a mobile device management (MDM) solution to enforce security policies on employee Android devices. The MDM policy requires a screen lock, disables installation of apps from unknown sources, and enforces a minimum Android version. However, some employees have rooted their devices to use a custom ROM. What is the most effective way to maintain security in this environment?

Disable the MDM agent on rooted devices to avoid conflicts.

Use the MDM to detect rooted devices and block them from accessing corporate resources.

Allow rooted devices but require the custom ROM to pass a security compliance check.

Ask employees to unroot their devices and reinstall the original firmware.

A security team is testing an iOS app that uses the Secure Enclave to store a biometric key. The team has a jailbroken device and wants to test whether the key can be extracted. Which statement is true regarding the Secure Enclave on a jailbroken device?

Jailbreaking allows direct read access to the Secure Enclave's key storage

The Secure Enclave is a separate processor and is not compromised by jailbreaking the application processor

Jailbreaking allows the app to access the Secure Enclave key without user authentication

Jailbreaking can disable the Secure Enclave entirely

Which of the following is a common technique attackers use to bypass MDM controls on a mobile device?

Deleting the MDM app from the home screen

Jailbreaking or rooting the device to remove MDM restrictions

Changing the device's wallpaper to avoid detection

Using a VPN to hide network traffic from the MDM

A mobile app security assessment is being planned for both Android and iOS versions of the same app. The team has limited time and wants to prioritize the most impactful testing activities. Which combination of activities should be performed first to identify common vulnerabilities?

Focus only on network traffic interception using a proxy

Perform static analysis on both platforms using jadx and class-dump, then review the app's manifest/Info.plist for insecure configurations

Conduct a full penetration test on one platform and assume the other is identical

Start with dynamic analysis on a rooted Android device and a jailbroken iOS device to test runtime behavior

EC-CouncilCertified Ethical Hacker

Domain 7Objective 2

Android and iOS Hacking CEH Practice Questions (Page 2)

Part of the Mobile, IoT and OT Hacking domain, which makes up ~11% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~10–18 in this domain), expect 2–4 from this objective — we provide 54 practice questions to prepare you well beyond it. (estimate)

54questions here

11free pages

12concepts

12 Concepts in This Objective

Android architecture and security model
Android app attack surface
Android reverse engineering
Android rooting and its security implications
Android exploitation techniques
iOS architecture and security model
iOS app attack surface
iOS reverse engineering
iOS jailbreaking and its security implications
iOS exploitation techniques
Mobile app security testing methodology
Mobile device management (MDM) and enterprise security

Questions 6–10

6application · medium
A company deploys a mobile device management (MDM) solution to enforce security policies on employee Android devices. The MDM policy requires a screen lock, disables installation of apps from unknown sources, and enforces a minimum Android version. However, some employees have rooted their devices to use a custom ROM. What is the most effective way to maintain security in this environment?
Select an answer first
7expert · hard
A security team is testing an iOS app that uses the Secure Enclave to store a biometric key. The team has a jailbroken device and wants to test whether the key can be extracted. Which statement is true regarding the Secure Enclave on a jailbroken device?
Select an answer first
8foundation · easy
Which tool is specifically designed to decode Android application resources (such as AndroidManifest.xml and layout files) to their original form, allowing an analyst to inspect and modify them, and then repackage the app?
Select an answer first
9foundation · easy
Which of the following is a common technique attackers use to bypass MDM controls on a mobile device?
Select an answer first
10application · medium
A mobile app security assessment is being planned for both Android and iOS versions of the same app. The team has limited time and wants to prioritize the most impactful testing activities. Which combination of activities should be performed first to identify common vulnerabilities?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Android and iOS Hacking CEH Practice Questions (Page 2)

Questions 6–10

A security team is testing an iOS app that uses the Secure Enclave to store a biometric key. The team has a jailbroken device and wants to test whether the key can be extracted. Which statement is true regarding the Secure Enclave on a jailbroken device?

Which tool is specifically designed to decode Android application resources (such as AndroidManifest.xml and layout files) to their original form, allowing an analyst to inspect and modify them, and then repackage the app?

Which of the following is a common technique attackers use to bypass MDM controls on a mobile device?

A mobile app security assessment is being planned for both Android and iOS versions of the same app. The team has limited time and wants to prioritize the most impactful testing activities. Which combination of activities should be performed first to identify common vulnerabilities?

Keep studying — Mobile, IoT and OT Hacking