Mobile Attack Vectors and Vulnerabilities EHE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   A mobile app developer fails to validate user input in a search field, allowing an attacker to inject malicious code. Which mobile app security risk does this exemplify?

   • AData leakage
   • BInsecure coding
   • CExcessive permissions
   • DInsecure storage
   Reveal Solution Discussion Select an answer first
2. 7expert · medium

   A company's BYOD policy currently allows employees to use personal devices for email. The security team wants to enforce a policy that allows remote wipe of corporate data only, not personal data. Which MDM feature supports this requirement?

   • ADevice enrollment
   • BContainerization
   • CSelective wipe
   • DFull wipe
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which mobile OS security feature ensures that only trusted software is loaded during the device's startup process?

   • AApp sandboxing
   • BFull-disk encryption
   • CSecure boot
   • DBiometric authentication
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A user reports that their phone's battery drains quickly, data usage spikes, and they see unfamiliar premium SMS charges. Which type of mobile malware is most likely responsible?

   • AA worm that spreads via Bluetooth
   • BSpyware that records keystrokes and sends them to a remote server
   • CA trojan that sends SMS messages to premium-rate numbers
   • DRansomware that encrypts files and demands payment
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A sales team frequently connects to public Wi-Fi at airports and coffee shops to check email and access the company CRM. Several users have reported that their phones occasionally show a 'privacy warning' about an unencrypted network. Management wants to reduce the risk of credentials being intercepted when users are on these untrusted networks. Which control should be implemented first?

   • AConfigure the corporate firewall to block all traffic from public IP addresses.
   • BDisable the Wi-Fi radio on all company phones and require users to use cellular data only.
   • CInstall a mobile antivirus app on each device to detect malicious network traffic.
   • DRequire all corporate email and CRM traffic to use a VPN client with always-on mode on company-managed devices.
   Reveal Solution Discussion Select an answer first