Mobile Device Security ECSS Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which authentication method is considered a biometric factor on mobile devices?

   • AA one-time password sent via SMS
   • BA numeric PIN
   • CA pattern lock
   • DFingerprint recognition
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is a common access control measure used to protect data on a mobile device from unauthorized access if the device is lost or stolen?

   • ATurning off Bluetooth
   • BScreen lock with a strong passcode
   • CUsing a custom ringtone
   • DDisabling the device's camera
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company is implementing a BYOD policy. They want to allow personal devices to access corporate email but want to ensure that if an employee leaves the company, the corporate email data is removed from the device without affecting personal data. Which approach should they choose?

   • ARequire employees to use a personal email client and manually delete corporate emails when they leave
   • BUse an MDM with a containerized email app that supports selective wipe
   • CPerform a full-device wipe when the employee leaves
   • DDisable the device's camera and microphone to prevent data leakage
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A user connects to a Bluetooth speaker in a conference room and later notices that their phone is sending files to an unknown device. What is the most likely cause and the immediate mitigation?

   • AThe speaker was infected with malware that spread to the phone. The user should run an antivirus scan.
   • BThe phone's Wi-Fi was compromised, and the attacker used a man-in-the-middle attack to transfer files. The user should disconnect from Wi-Fi.
   • CThe Bluetooth connection was not authenticated, allowing a nearby attacker to pair and transfer files. The user should disable Bluetooth and remove the unknown device from paired devices.
   • DThe phone's Bluetooth was left in discoverable mode, and the attacker used a Bluejacking attack to send unsolicited messages. The user should turn off discoverable mode.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A mobile security team is investigating a phishing attack that tricked employees into installing a malicious app that requests device administrator privileges. The app is now able to read SMS messages and prevent uninstallation. What is the MOST effective response to mitigate the threat?

   • AUse an MDM to remotely revoke the device administrator privileges and then uninstall the app
   • BPerform a factory reset on all affected devices
   • CAsk employees to manually uninstall the app from the settings menu
   • DDisable SMS permissions for the app through the OS settings
   Reveal Solution Discussion Select an answer first