Mobile Attack Vectors and Vulnerabilities EHE Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   A mobile device is left unattended in a public area, and an unauthorized person picks it up and accesses the user's email. Which physical security threat does this scenario illustrate?

   • AUnauthorized access
   • BData leakage
   • CPhishing
   • DMalware
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A security analyst is comparing iOS and Android for a corporate deployment. The analyst notes that both platforms use app sandboxing to isolate apps from each other. However, the analyst is concerned about a specific vulnerability where a malicious app could read data from another app's sandbox. Which platform feature is designed to prevent this?

   • AApp sandboxing with per-app data isolation enforced by the OS kernel
   • BSecure boot, which ensures only trusted OS code runs
   • CHardware-backed encryption, which encrypts all app data
   • DCertificate pinning, which ensures secure connections
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   A mobile device is infected with malware that encrypts the user's files and displays a message demanding payment to restore access. Which type of mobile malware is this?

   • AAdware
   • BSpyware
   • CRansomware
   • DTrojan
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A security team is investigating a report that several employees' phones have been sending sensitive data to an unknown server while connected to the office Wi-Fi. The phones are not jailbroken/rooted and have no suspicious apps installed. Which attack vector is most likely being exploited?

   • AA malicious app that hides its activity from the app list
   • BA rogue access point or man-in-the-middle attack on the Wi-Fi network
   • CA SIM card swap attack
   • DA Bluetooth vulnerability that allows remote code execution
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which mobile app security risk occurs when an app requests more permissions than it needs to function?

   • AExcessive permissions
   • BInsecure coding
   • CData leakage
   • DReverse engineering
   Reveal Solution Discussion Select an answer first