Mobile Attack Vectors and Vulnerabilities EHE Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which mobile network threat involves an attacker intercepting and potentially altering communications between a mobile device and a legitimate server?

   • ARogue access point
   • BMan-in-the-middle (MITM) attack
   • CWi-Fi eavesdropping
   • DBluejacking
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A company allows employees to use personal smartphones for work (BYOD). An employee loses their phone at a conference. The phone has a simple 4-digit PIN and contains the corporate email app, which has cached sensitive attachments. The company's MDM solution can remotely wipe the device. What is the most immediate risk and the best action?

   • AThe cached attachments could be accessed if the PIN is guessed; perform a remote wipe immediately.
   • BThe device's encryption is automatically enabled, so there is no risk; just wait for the employee to report back.
   • CThe MDM can track the phone's location, so the company should send security to retrieve it.
   • DThe employee should change their corporate password, but the cached attachments are not a concern because they are in the email app's sandbox.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A security auditor is reviewing the mobile OS security features of a fleet of devices. Which feature is designed to prevent a compromised app from reading another app's data?

   • ASecure boot
   • BFull-disk encryption
   • CBiometric authentication
   • DApp sandboxing
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is a primary security risk associated with BYOD (bring-your-own-device) policies?

   • ALack of centralized control over device security settings
   • BIncreased hardware costs for the organization
   • CGuaranteed data leakage due to personal app usage
   • DInability to use mobile device management (MDM) software
   Reveal Solution Discussion Select an answer first
6. 25expert · medium

   A company's security policy requires that all mobile traffic be encrypted, but employees frequently use public Wi-Fi. The IT team is considering two solutions: a VPN client that employees must manually enable, or an MDM-enforced VPN that automatically connects. Which solution is more likely to ensure consistent protection?

   • ABoth are equally effective
   • BThe MDM-enforced VPN, because it removes the reliance on user action
   • CNeither solution can protect against public Wi-Fi threats
   • DThe manual VPN client, because users can choose when to enable it
   Reveal Solution Discussion Select an answer first