Android and iOS Hacking CEH Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   During a code review of an Android app, you find that it stores a database in the app's private directory with world-readable permissions. The app also has a broadcast receiver that is exported and performs an action based on the data in the received intent. What is the most significant risk?

   • AThe exported broadcast receiver can be triggered by any app, causing the app to crash.
   • BAnother app can read the database directly from the private directory because of the world-readable permission.
   • CThe broadcast receiver can be used to launch a phishing attack.
   • DThe app is vulnerable to SQL injection because the database is world-readable.
   Reveal Solution Discussion Select an answer first
2. 37expert · hard

   A company's MDM policy prohibits rooting Android devices. However, a security researcher needs to root a test device to perform a deep security assessment of a corporate app. The researcher also needs to access the app's private data directory. Which of the following is the most appropriate approach?

   • AUse a dedicated test device that is not enrolled in the MDM, root it, and perform the assessment on that device.
   • BRoot the researcher's primary device and temporarily unenroll it from the MDM during the assessment.
   • CUse a non-rooted device and rely on the app's debug mode to access private data.
   • DAsk the MDM administrator to whitelist the rooted device for the assessment.
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A security researcher is analyzing an iOS app that stores a sensitive authentication token in the Keychain. The app runs on a non-jailbroken device. The researcher wants to determine if the token is accessible to other apps or if it is protected by the device passcode. Which iOS security feature is most relevant to this assessment?

   • AApp sandbox and container directories
   • BSecure Enclave and Touch ID/Face ID
   • CKeychain access groups and data protection classes
   • DCode signing and provisioning profiles
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   Which iOS component is a secure, encrypted database used to store small pieces of sensitive data like passwords and tokens, but can be a target if an app stores data with weak access controls?

   • ANSUserActivity
   • BCore Data
   • CUserDefaults
   • DKeychain
   Reveal Solution Discussion Select an answer first
6. 40expert · hard

   A security consultant is reviewing an Android app that uses multiple activities, services, and receivers. The app's manifest shows that a service is exported and a receiver is also exported. The consultant wants to identify the most critical attack vector that could lead to data leakage. Which component should be prioritized?

   • AThe exported service, because it may expose methods that can be invoked by malicious apps
   • BThe content providers, because they can be queried directly for data
   • CThe exported receiver, because it can receive malicious broadcasts that trigger actions
   • DThe activities, because they are the main entry points and can be launched with malicious intents
   Reveal Solution Discussion Select an answer first