Android and iOS Hacking CEH Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the primary security implication of rooting an Android device?

   • AIt automatically installs a custom ROM that removes all pre-installed apps.
   • BIt removes the device's ability to connect to Wi-Fi networks.
   • CIt encrypts all data on the device, making it unreadable to apps.
   • DIt grants the user superuser (root) privileges, bypassing many kernel-level security controls.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   You are assessing an iOS app that uses the Secure Enclave to store a private key used for signing requests. The app also uses a custom URL scheme to receive data from other apps. You discover that the app does not validate the source of the URL scheme. Which of the following is the most likely impact?

   • AA malicious app can invoke the URL scheme and cause the app to perform an unintended action, such as signing a request with the stored key.
   • BThe Secure Enclave key can be extracted by a malicious app because the URL scheme is insecure.
   • CThe app's code signing can be bypassed by sending a crafted URL.
   • DThe app's sandbox can be escaped by sending a crafted URL.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which type of iOS exploitation targets vulnerabilities in the app's memory management, such as buffer overflows or use-after-free, to execute arbitrary code?

   • AKeychain exploitation
   • BURL scheme exploitation
   • CSocial engineering
   • DMemory corruption
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   You are analyzing an Android app that uses the SafetyNet API to detect root access. The app also uses a native library to perform cryptographic operations. During testing, you find that the app can be run on a rooted device by using Magisk to hide root from SafetyNet. Which of the following is the most effective way to bypass SafetyNet and continue dynamic analysis?

   • ADisable SafetyNet entirely by modifying the app's code and re-signing it.
   • BUse a non-rooted device and a proxy to intercept traffic, bypassing SafetyNet.
   • CUse an emulator with root access and disable SafetyNet checks.
   • DUse Magisk's MagiskHide feature to hide root from SafetyNet, and then use Frida to attach to the app.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   In the Android operating system architecture, which component is responsible for providing a standardized interface between the Android framework and the hardware-specific device drivers?

   • AAndroid runtime (ART)
   • BLinux kernel
   • CHardware Abstraction Layer (HAL)
   • DApplication framework
   Reveal Solution Discussion Select an answer first