Mobile Device Security ECSS Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which attack vector is particularly common on mobile devices because users often install apps from unofficial sources?

   • AFirmware update interception
   • BDNS cache poisoning on the device
   • CPhysical theft of the device
   • DSideloading malicious applications
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A company is implementing a new mobile access control policy. They want to use biometric authentication for convenience, but the security team is concerned about spoofing and the legal implications of forcing biometrics. Which approach addresses these concerns?

   • AUse a smart card or hardware token for authentication instead of biometrics.
   • BUse biometrics as the sole authentication method and disable PIN fallback.
   • CUse biometrics as a convenience factor, but require a strong PIN as the primary authentication method that cannot be bypassed.
   • DRequire biometric authentication for all device unlocks and do not store any fallback credentials.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company distributes a custom internal app to employees. The app requests access to the camera, contacts, and location. The security team wants to minimize the risk of data leakage. What is the best practice?

   • ARequest permissions at runtime only when the feature is needed, and explain why the permission is required.
   • BUse a third-party library that automatically grants permissions to simplify development.
   • CEmbed the app in a container that has all permissions pre-granted.
   • DRequest all permissions at installation to ensure the app works without interruption.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which technique is used to protect data on a mobile device by converting it into an unreadable format that requires a key to restore?

   • AEncryption
   • BCompression
   • CHashing
   • DObfuscation
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A user reports that their phone battery drains quickly, data usage spikes, and they see pop-up ads even when not using the browser. The security team suspects a mobile trojan. What is the first step in responding?

   • AChange the user's password and enable two-factor authentication.
   • BIsolate the device by disconnecting it from the corporate network and begin a forensic analysis of installed apps and network connections.
   • CInstall a mobile antivirus app and run a scan.
   • DImmediately perform a factory reset to remove the malware.
   Reveal Solution Discussion Select an answer first