Mobile, IoT, and OT Attacks ECSS Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A security analyst is investigating a series of mobile malware infections on company-issued Android devices. The malware is spreading through SMS messages that contain a link to a malicious APK. The analyst wants to prevent further infections. Which control is most effective at blocking this attack vector?

   • AEncrypt all data on the devices using full-disk encryption
   • BEnable two-factor authentication for corporate email
   • CDisable the installation of apps from unknown sources on all managed devices
   • DImplement a mobile device management (MDM) policy that enforces a screen lock
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A security consultant is developing a penetration testing plan for a hospital's building management system (BMS) that controls HVAC and access control. The BMS is connected to the hospital's IT network. The hospital's primary concern is patient safety, and any disruption to HVAC could affect operating rooms. Which testing strategy best balances the need for thorough testing with patient safety?

   • ALimit testing to passive observation of BMS traffic and configuration review
   • BRun the tests during off-hours when the hospital is less busy
   • CConduct the testing in a mirrored lab environment that replicates the BMS setup
   • DPerform active exploitation of the BMS controllers to test their resilience
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Which security feature is a key differentiator of Apple's iOS compared to Android, providing hardware-backed encryption and secure boot?

   • AVerified Boot
   • BSELinux
   • CSecure Enclave
   • DGoogle Play Protect
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A security researcher is analyzing a new IoT door lock. The lock has a Bluetooth Low Energy (BLE) interface, a mobile app for control, and a physical keypad. The researcher wants to identify the attack surface with the highest likelihood of a remote, unauthenticated compromise. Which attack surface should be prioritized?

   • AThe BLE interface
   • BThe physical keypad
   • CThe mobile app's local storage
   • DThe device's firmware update mechanism
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A security researcher is analyzing an IoT device that has a web interface, a Bluetooth Low Energy (BLE) service, and a cloud backend. The researcher wants to identify vulnerabilities that could allow an attacker to take control of the device remotely. Which attack surface is most likely to be the weakest link?

   • AThe cloud backend, which may have insecure APIs or weak authentication.
   • BThe firmware update mechanism, which may not verify signatures.
   • CThe web interface, which may have default credentials.
   • DThe BLE service, which may have weak pairing or unencrypted communication.
   Reveal Solution Discussion Select an answer first