Mobile Attack Vectors and Vulnerabilities EHE Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   Which of the following is a common mobile attack vector that involves tricking a user into installing a malicious application from an unofficial source?

   • ASIM swapping
   • BSideloading
   • CBluejacking
   • DBaseband attack
   Reveal Solution Discussion Select an answer first
2. 32expert · medium

   A security team is analyzing a mobile app that was sideloaded by several employees. The app requests permissions to read contacts, send SMS, and access location. After installation, the employees' contacts received phishing messages that appeared to come from the employees' phones. The app also sends the device's location to a remote server. Which classification best describes this app?

   • AA worm, because it self-propagates to contacts.
   • BA banking trojan, because it targets financial credentials.
   • CSpyware, because it covertly collects and exfiltrates personal data.
   • DRansomware, because it locks the device and demands payment.
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   Which physical security threat to mobile devices involves an attacker stealing a device to access the data it contains?

   • AMalware infection
   • BNetwork eavesdropping
   • CTheft
   • DPhishing
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A company allows employees to use personal smartphones for work email. A device is lost, and the IT team needs to prevent unauthorized access to the corporate email on that device. Which action should be taken first?

   • ASend a remote wipe command through the MDM system
   • BChange the employee's email password
   • CDisable the employee's Active Directory account
   • DAsk the employee to report the loss to the police
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A mobile app developer is writing a note-taking app that stores user notes locally. The developer wants to ensure that if the device is lost, the notes cannot be read. The app currently uses the device's default encryption, but the developer is concerned about the lock screen PIN being weak. Which additional measure would best protect the notes?

   • AUse a longer file name for the notes to make them harder to find.
   • BStore the notes in the app's private directory, which is already protected by the sandbox.
   • CRely on the device's full-disk encryption, which is sufficient.
   • DEncrypt the notes with a key derived from a user-provided passphrase that is not stored on the device.
   Reveal Solution Discussion Select an answer first