Which iOS feature allows apps to register custom protocols (e.g., myapp://) that can be invoked by other apps or web pages, and if not properly validated, can be exploited to trigger unintended actions?

Inter-process communication (IPC)

What is the primary purpose of Mobile Device Management (MDM) in an enterprise environment?

To provide a backup of all corporate data to the cloud

To enforce security policies on mobile devices, such as passcode requirements, encryption, and remote wipe

To allow employees to install any app without restrictions

To provide a direct VPN connection to the corporate network for all apps

You are tasked with performing a security assessment of an iOS app that uses encryption to protect data at rest. The app is distributed through the App Store and runs on non-jailbroken devices. To perform dynamic analysis, you need to bypass code signing and run debugging tools. Which approach is most appropriate?

Jailbreak a test device and use tools like LLDB and Frida to attach to the app and trace its runtime behavior.

Decrypt the app binary using a tool like class-dump on a non-jailbroken device.

Use a non-jailbroken device and the app's built-in debug mode to attach LLDB.

Use a simulator to run the app and perform dynamic analysis without jailbreaking.

Which Android security mechanism assigns each installed application a unique Linux user ID (UID) and runs it in its own process, thereby isolating app data and resources?

SELinux (Security-Enhanced Linux)

Permission-based access control

EC-CouncilCertified Ethical Hacker

Domain 7Objective 2

Android and iOS Hacking CEH Practice Questions (Page 5)

Part of the Mobile, IoT and OT Hacking domain, which makes up ~11% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~10–18 in this domain), expect 2–4 from this objective — we provide 54 practice questions to prepare you well beyond it. (estimate)

54questions here

11free pages

12concepts

12 Concepts in This Objective

Android architecture and security model
Android app attack surface
Android reverse engineering
Android rooting and its security implications
Android exploitation techniques
iOS architecture and security model
iOS app attack surface
iOS reverse engineering
iOS jailbreaking and its security implications
iOS exploitation techniques
Mobile app security testing methodology
Mobile device management (MDM) and enterprise security

Questions 21–25

21foundation · easy
Which tool is a debugger commonly used for dynamic analysis of iOS apps, allowing an analyst to set breakpoints, inspect memory, and trace function calls on a jailbroken device?
Select an answer first
22foundation · easy
Which iOS feature allows apps to register custom protocols (e.g., myapp://) that can be invoked by other apps or web pages, and if not properly validated, can be exploited to trigger unintended actions?
Select an answer first
23foundation · easy
What is the primary purpose of Mobile Device Management (MDM) in an enterprise environment?
Select an answer first
24application · medium
You are tasked with performing a security assessment of an iOS app that uses encryption to protect data at rest. The app is distributed through the App Store and runs on non-jailbroken devices. To perform dynamic analysis, you need to bypass code signing and run debugging tools. Which approach is most appropriate?
Select an answer first
25foundation · easy
Which Android security mechanism assigns each installed application a unique Linux user ID (UID) and runs it in its own process, thereby isolating app data and resources?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Android and iOS Hacking CEH Practice Questions (Page 5)

Questions 21–25

Which tool is a debugger commonly used for dynamic analysis of iOS apps, allowing an analyst to set breakpoints, inspect memory, and trace function calls on a jailbroken device?

Which iOS feature allows apps to register custom protocols (e.g., myapp://) that can be invoked by other apps or web pages, and if not properly validated, can be exploited to trigger unintended actions?

What is the primary purpose of Mobile Device Management (MDM) in an enterprise environment?

Which Android security mechanism assigns each installed application a unique Linux user ID (UID) and runs it in its own process, thereby isolating app data and resources?

Keep studying — Mobile, IoT and OT Hacking