EC-CouncilCertified Ethical Hacker
Domain 7Objective 1
Mobile Attack Vectors and OWASP Mobile Top 10 CEH Practice Questions (Page 7)
Part of the Mobile, IoT and OT Hacking domain, which makes up ~11% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~10–18 in this domain), expect 2–4 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)
46questions here
10free pages
6concepts
Questions 31–35
- 31
A mobile app tester wants to identify whether an app is vulnerable to insecure data storage by examining the app's local files and databases on a rooted device. Which testing approach is most effective?
Select an answer first - 32
A penetration tester is testing a mobile app that uses certificate pinning to prevent man-in-the-middle attacks. The tester needs to intercept the app's HTTPS traffic to identify insecure communication issues. Which approach is most effective?
Select an answer first - 33
Which mobile OS security mechanism restricts an app's access to other apps' data and system resources by running each app in its own isolated environment?
Select an answer first - 34
During a mobile app security test, a tester uses a proxy to intercept and modify the traffic between the app and its backend server. Which OWASP Mobile Top 10 risk is this technique most likely to uncover?
Select an answer first - 35
A security analyst is reviewing a mobile app that uses a WebView to display web content. The app enables JavaScript and allows file access from the WebView. Which attack vector is most directly enabled by this configuration?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.