Android and iOS Hacking CEH Practice Questions (Page 9)

Questions 41–45

1. 41application · medium

   A penetration tester is performing static analysis on an iOS app that is encrypted (App Store build). The tester needs to inspect the app's Objective-C class interfaces and method implementations. Which tool is most appropriate for this task?

   • Ajadx to decompile the app's bytecode
   • BAPKTool to decode the app's resources
   • Cclass-dump to extract Objective-C headers from the decrypted binary
   • DFrida to hook the app at runtime without decrypting it
   Reveal Solution Discussion Select an answer first
2. 42foundation · easy

   Which iOS security layer ensures that only trusted code from Apple or approved developers can run on a device, by verifying the digital signature of every executable?

   • AXNU kernel
   • BCode signing
   • CSandboxing
   • DSecure Enclave
   Reveal Solution Discussion Select an answer first
4. 43foundation · easy

   Which Android exploitation technique involves sending a crafted Intent to a vulnerable exported component to trigger unintended actions or access protected data?

   • AContent provider exploitation
   • BMan-in-the-middle attack
   • CWebView JavaScript injection
   • DIntent injection
   Reveal Solution Discussion Select an answer first
5. 44application · medium

   A penetration tester is analyzing an Android app that uses native code for cryptographic operations. The tester needs to understand the app's logic and identify hardcoded keys, but the app is obfuscated and the native library is stripped. Which combination of tools would be most effective for static analysis?

   • AUse jadx to decompile the DEX code and APKTool to decode resources, then use a disassembler on the native library
   • BUse class-dump to extract the Objective-C headers from the native library
   • CUse Hopper to decompile the DEX code directly
   • DUse Frida to hook the native functions at runtime and trace the keys
   Reveal Solution Discussion Select an answer first
6. 45application · medium

   An iOS app registers a custom URL scheme (myapp://) to handle deep links. A tester discovers that the app does not validate the source of incoming URLs and passes parameters directly to a web service. Which attack is most likely to succeed?

   • AUse a keychain exploit to read the app's stored credentials
   • BCraft a malicious URL that triggers a state-changing action in the app
   • CUse a jailbreak to bypass the app sandbox and read its data
   • DUse a memory corruption exploit in the app's binary
   Reveal Solution Discussion Select an answer first