A security architect is designing a mobile app for a high-security environment. The app will handle classified documents. The architect must ensure that the app's data is protected even if the device is rooted or jailbroken. Which combination of controls is most effective?

Store all data in the cloud and do not keep any sensitive data on the device.

Use certificate pinning to ensure secure network connections, and assume the device is secure.

Use app-level encryption with a key stored in the secure hardware keystore, and implement jailbreak/root detection to refuse to run on compromised devices.

Rely on the OS's built-in full-disk encryption, which is sufficient on both iOS and Android.

A mobile app developer is concerned about reverse engineering of the app's code. The app handles payment information. Which practice is most effective in protecting the app's code and data?

Rely on the app store's review process

Store sensitive data in the app's shared preferences

Obfuscate the code and use runtime integrity checks

Use a hard-coded API key in the app

Which of the following is a security risk specifically associated with mobile device management (MDM) systems?

MDM systems are immune to malware

MDM requires physical access to devices

MDM server compromise could allow an attacker to control enrolled devices

EC-CouncilEthical Hacking Essentials

Domain 7Objective 3

Mobile Attack Vectors and Vulnerabilities EHE Practice Questions (Page 4)

Part of the Wireless, Mobile, IoT, and OT Attacks domain, which makes up ~15% of our current practice bank.

47questions here

10free pages

8concepts

Questions 16–20

16foundation · easy
Which type of mobile malware is designed to secretly monitor a user's activities and collect sensitive information without the user's knowledge?
Select an answer first
17foundation · easy
An attacker sets up a Wi-Fi access point with a legitimate-sounding name in a public area to trick users into connecting. What is this attack called?
Select an answer first
18expert · medium
A security architect is designing a mobile app for a high-security environment. The app will handle classified documents. The architect must ensure that the app's data is protected even if the device is rooted or jailbroken. Which combination of controls is most effective?
Select an answer first
19expert · hard
A mobile app developer is concerned about reverse engineering of the app's code. The app handles payment information. Which practice is most effective in protecting the app's code and data?
Select an answer first
20foundation · easy
Which of the following is a security risk specifically associated with mobile device management (MDM) systems?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to EHE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “EHE” is a trademark of its owner, used for identification only.

Mobile Attack Vectors and Vulnerabilities EHE Practice Questions (Page 4)

Questions 16–20

Which type of mobile malware is designed to secretly monitor a user's activities and collect sensitive information without the user's knowledge?

An attacker sets up a Wi-Fi access point with a legitimate-sounding name in a public area to trick users into connecting. What is this attack called?

A security architect is designing a mobile app for a high-security environment. The app will handle classified documents. The architect must ensure that the app's data is protected even if the device is rooted or jailbroken. Which combination of controls is most effective?

A mobile app developer is concerned about reverse engineering of the app's code. The app handles payment information. Which practice is most effective in protecting the app's code and data?

Which of the following is a security risk specifically associated with mobile device management (MDM) systems?

Keep studying — Wireless, Mobile, IoT, and OT Attacks