A penetration tester is assessing a company's mobile banking app. The tester intercepts traffic and finds that the app sends sensitive data over HTTP to a server that does not validate certificates. Which OWASP Mobile Top 10 risk is being exploited, and what is the most appropriate remediation?

Improper Platform Usage; restrict app permissions to only necessary ones

Insufficient Cryptography; use a stronger hashing algorithm for data in transit

Insecure Communication; enforce HTTPS with certificate pinning and proper certificate validation

Insecure Data Storage; encrypt data at rest using AES-256

A penetration tester is evaluating the security of a mobile app that uses Bluetooth Low Energy (BLE) to communicate with a wearable device. Which attack vector is most relevant to test?

Eavesdropping on BLE communications if encryption is not enforced

SQL injection in the app's local database

A security analyst notices that several employees' Android devices are sending premium SMS messages to unknown numbers. The devices were all purchased from the same third-party vendor and have unknown app sources enabled. What is the most likely attack vector and what should be the immediate response?

Operating system vulnerability; apply the latest security patch

Phishing attack via email; instruct users to avoid clicking links

Network-based man-in-the-middle attack; change Wi-Fi passwords and enforce HTTPS

Malicious app installed from a third-party store; remove the app and disable unknown sources

A mobile app stores sensitive user data in a local SQLite database without encryption. The developer argues that the app's sandbox prevents other apps from accessing the data. Which counterargument is most accurate?

The app store review process would have caught this issue

The sandbox is not designed to protect data at rest

On a rooted or jailbroken device, sandbox protections can be bypassed, exposing the data

SQLite databases are inherently insecure

EC-CouncilCertified Ethical Hacker

Domain 7Objective 1

Mobile Attack Vectors and OWASP Mobile Top 10 CEH Practice Questions (Page 8)

Part of the Mobile, IoT and OT Hacking domain, which makes up ~11% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~10–18 in this domain), expect 2–4 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

6concepts

Questions 36–40

36application · medium
A penetration tester is assessing a company's mobile banking app. The tester intercepts traffic and finds that the app sends sensitive data over HTTP to a server that does not validate certificates. Which OWASP Mobile Top 10 risk is being exploited, and what is the most appropriate remediation?
Select an answer first
37application · medium
A penetration tester is evaluating the security of a mobile app that uses Bluetooth Low Energy (BLE) to communicate with a wearable device. Which attack vector is most relevant to test?
Select an answer first
38foundation · easy
A user installs a flashlight app that also secretly sends premium SMS messages to a premium-rate number. What type of mobile malware is this?
Select an answer first
39application · medium
A security analyst notices that several employees' Android devices are sending premium SMS messages to unknown numbers. The devices were all purchased from the same third-party vendor and have unknown app sources enabled. What is the most likely attack vector and what should be the immediate response?
Select an answer first
40expert · hard
A mobile app stores sensitive user data in a local SQLite database without encryption. The developer argues that the app's sandbox prevents other apps from accessing the data. Which counterargument is most accurate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Mobile Attack Vectors and OWASP Mobile Top 10 CEH Practice Questions (Page 8)

Questions 36–40

A penetration tester is assessing a company's mobile banking app. The tester intercepts traffic and finds that the app sends sensitive data over HTTP to a server that does not validate certificates. Which OWASP Mobile Top 10 risk is being exploited, and what is the most appropriate remediation?

A penetration tester is evaluating the security of a mobile app that uses Bluetooth Low Energy (BLE) to communicate with a wearable device. Which attack vector is most relevant to test?

A user installs a flashlight app that also secretly sends premium SMS messages to a premium-rate number. What type of mobile malware is this?

A mobile app stores sensitive user data in a local SQLite database without encryption. The developer argues that the app's sandbox prevents other apps from accessing the data. Which counterargument is most accurate?

Keep studying — Mobile, IoT and OT Hacking