Mobile, IoT, and OT Attacks ECSS Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A mobile app developer has just completed an Android app that uses a WebView to display user-supplied content. The security team wants to test the app for common WebView vulnerabilities before release. Which testing approach would most directly identify a JavaScript injection flaw in the WebView?

   • ADynamic analysis with a proxy to intercept and modify HTTP responses from the app's backend
   • BRuntime hooking with Frida to bypass SSL pinning and observe encrypted traffic
   • CReverse engineering the APK to extract hardcoded API keys
   • DStatic analysis of the source code to inspect WebView settings and JavaScript interface exposure
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   Which of the following is a common attack vector that specifically exploits the trust users place in text messages to deliver malicious links or request sensitive information?

   • ASMS phishing (smishing)
   • BBluetooth pairing attack
   • CJailbreaking
   • DSIM swapping
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A manufacturer of smart thermostats discovers that a batch of devices shipped with a hardcoded root password in the firmware. The devices connect to the internet and are managed via a cloud service. Which vulnerability class does this issue represent, and what is the most immediate remediation?

   • ALack of update mechanism; push a firmware update to change the password
   • BInsecure web interface; disable the web interface on all devices
   • CDefault credentials; require a unique password during device setup and provide a firmware update to remove the hardcoded password
   • DInsecure communication; update the cloud service to use TLS
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   An IoT device sends sensor data to its cloud server without encryption, allowing an attacker on the same network to read the data. Which IoT vulnerability does this illustrate?

   • AInsecure communication
   • BLack of update mechanism
   • CPhysical port exposure
   • DDefault credentials
   Reveal Solution Discussion Select an answer first
6. 40expert · hard

   A penetration tester is assessing a mobile app that uses certificate pinning. The tester needs to intercept HTTPS traffic to analyze the app's API calls. Which technique is most effective?

   • APerform static analysis of the app's binary to extract the API endpoints and parameters.
   • BInstall a custom CA certificate on the device and configure the proxy to use it.
   • CUse a network sniffer to capture raw packets without decrypting them.
   • DUse Frida to bypass the certificate pinning at runtime, then intercept traffic with a proxy.
   Reveal Solution Discussion Select an answer first