Mobile Device Security ECSS Practice Questions (Page 7)

Questions 31–35

1. 31expert · hard

   A security analyst is evaluating the risk of a mobile device being compromised through a malicious charging station (juice jacking). The device is used for corporate email and has USB debugging enabled. Which mitigation is MOST effective in preventing data exfiltration through this attack vector?

   • AUse a VPN when connecting to the charging station
   • BSet the device to require authentication before allowing USB connections
   • CDisable USB debugging and use a USB data blocker or charge-only cable
   • DEnable Bluetooth and use wireless charging instead
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which characteristic of mobile devices most directly increases their exposure to theft and loss compared to traditional desktop computers?

   • AThey lack any form of encryption by default
   • BThey cannot run security software
   • CThey are always connected to a corporate LAN
   • DThey are portable and often used in public locations
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A sales team frequently connects to public Wi-Fi at airports and coffee shops to check email and access the company CRM. The security team wants to reduce the risk of credential theft and man-in-the-middle attacks without requiring a VPN client on every device. Which control should be implemented first?

   • AInstall a mobile antivirus app on each device to detect malware on the network.
   • BDisable Wi-Fi on all company devices and require the use of cellular data only.
   • CDeploy a certificate-based authentication system with a mandatory always-on VPN profile pushed via MDM.
   • DTrain employees to check for the padlock icon in the browser before entering credentials.
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A developer is creating a mobile banking app that stores transaction history locally. The security review requires that the app minimize the risk of data theft if the device is rooted or jailbroken. Which approach is most effective?

   • AStore sensitive data in the app's sandboxed storage and use the platform's Keychain/Keystore for encryption keys.
   • BEncrypt all data with a key stored in the app's shared preferences.
   • CUse a custom database file in the app's documents directory with a hardcoded encryption key.
   • DDisable the app on devices that are rooted or jailbroken by checking at runtime.
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   Which regulatory compliance requirement often drives the need for mobile device security policies in organizations handling personal data?

   • AWorld Wide Web Consortium (W3C) HTML standard
   • BInternational Organization for Standardization (ISO) 9001
   • CGeneral Data Protection Regulation (GDPR)
   • DInstitute of Electrical and Electronics Engineers (IEEE) 802.11
   Reveal Solution Discussion Select an answer first