Mobile Device Security ECSS Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   A security analyst is investigating a suspected man-in-the-middle attack on a corporate mobile device connected to a rogue Wi-Fi access point. The device is using a VPN, but the analyst suspects that the VPN connection itself was not established. Which evidence would MOST strongly confirm that the VPN was not active during the attack?

   • AThe analyst found a suspicious certificate installed on the device
   • BThe device's battery drained faster than usual during the attack period
   • CNetwork logs show that the device's traffic was sent directly to the rogue access point's gateway without encapsulation
   • DThe device's Wi-Fi settings show that it was connected to an open network
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which practice is a recommended security best practice for mobile app development?

   • AMinimizing the permissions the app requests
   • BDisabling all security features to improve user experience
   • CUsing hardcoded API keys for authentication
   • DStoring sensitive data in plain text within the app's local storage
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A mobile app developer is concerned about a new type of malware that uses accessibility services to overlay fake login screens and steal credentials. The developer wants to protect their app's users. Which measure is most effective?

   • AUse a custom keyboard for password entry to avoid overlays.
   • BDisable the app's functionality if the device is rooted or jailbroken.
   • CDetect if the device has accessibility services enabled and warn the user before allowing sensitive transactions.
   • DEncrypt all data stored by the app to prevent credential theft.
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A mobile app development team is releasing a new version of an app that handles financial data. The security team requires that the app resist reverse engineering and tampering. Which combination of techniques is most effective?

   • AUsing a third-party analytics SDK to monitor app usage.
   • BCode obfuscation, integrity checks, and certificate pinning.
   • CStoring encryption keys in the app's assets folder.
   • DRelying on the operating system's sandbox to protect the app from tampering.
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A company is deploying a new MDM solution. They have a mix of corporate-owned and employee-owned devices. The security team wants to enforce encryption on all devices, but employees are concerned about the performance impact of encryption on their personal devices. Which deployment model BEST addresses this concern while still meeting the security requirement?

   • AOnly enforce encryption on devices that access email, not on devices that access other corporate data
   • BRequire full-device encryption on all devices, regardless of ownership
   • CUse a unified endpoint management (UEM) solution that applies different policies to corporate-owned and BYOD devices, with encryption required only on corporate-owned devices
   • DDo not enforce encryption on any device to avoid performance issues
   Reveal Solution Discussion Select an answer first