A company has a BYOD policy and uses an MDM solution. An employee reports that their personal photos are being accessed by a work-related app. The MDM logs show that the app has permission to access storage. The employee wants to keep using the device for work but is concerned about privacy. What is the best course of action?

Disable the device's camera and photo storage

Revoke the app's storage permission and use a containerized work profile that restricts data access

Uninstall the work-related app and use a web-based version instead

Perform a full device wipe and re-enroll the device in MDM

What is the primary role of Mobile Device Management (MDM) in an enterprise environment?

To centrally manage, secure, and enforce policies on mobile devices

To replace the need for antivirus software on mobile devices

To provide a marketplace for approved mobile apps

To create a separate network for mobile devices

A mobile app developer is using a WebView to display web content within the app. The WebView has JavaScript enabled and loads content from an untrusted source. Which OWASP Mobile Top 10 risk is most relevant, and what is the best mitigation?

Insufficient Cryptography; use a stronger encryption for WebView data

Improper Platform Usage; disable JavaScript and restrict WebView to trusted content

Insecure Communication; use HTTPS for WebView URLs

Insecure Data Storage; encrypt WebView cache

EC-CouncilCertified Ethical Hacker

Domain 7Objective 1

Mobile Attack Vectors and OWASP Mobile Top 10 CEH Practice Questions (Page 9)

Part of the Mobile, IoT and OT Hacking domain, which makes up ~11% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~10–18 in this domain), expect 2–4 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

6concepts

Questions 41–45

41expert · hard
A company has a BYOD policy and uses an MDM solution. An employee reports that their personal photos are being accessed by a work-related app. The MDM logs show that the app has permission to access storage. The employee wants to keep using the device for work but is concerned about privacy. What is the best course of action?
Select an answer first
42foundation · easy
What is the primary role of Mobile Device Management (MDM) in an enterprise environment?
Select an answer first
43application · medium
During a mobile app review, a tester discovers that the app uses a custom URL scheme to handle deep links and does not validate the source of the URL. Which OWASP Mobile Top 10 risk is most directly associated with this issue?
Select an answer first
44application · medium
A mobile app developer is using a WebView to display web content within the app. The WebView has JavaScript enabled and loads content from an untrusted source. Which OWASP Mobile Top 10 risk is most relevant, and what is the best mitigation?
Select an answer first
45foundation · easy
Which type of mobile malware is designed to monitor a user's activities, such as capturing keystrokes, recording calls, or tracking location, and then send that information to a remote attacker?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Mobile Attack Vectors and OWASP Mobile Top 10 CEH Practice Questions (Page 9)

Questions 41–45

What is the primary role of Mobile Device Management (MDM) in an enterprise environment?

During a mobile app review, a tester discovers that the app uses a custom URL scheme to handle deep links and does not validate the source of the URL. Which OWASP Mobile Top 10 risk is most directly associated with this issue?

A mobile app developer is using a WebView to display web content within the app. The WebView has JavaScript enabled and loads content from an untrusted source. Which OWASP Mobile Top 10 risk is most relevant, and what is the best mitigation?

Which type of mobile malware is designed to monitor a user's activities, such as capturing keystrokes, recording calls, or tracking location, and then send that information to a remote attacker?

Keep studying — Mobile, IoT and OT Hacking