Mobile Attack Vectors and Vulnerabilities EHE Practice Questions (Page 8)

Questions 36–40

1. 36expert · medium

   A security analyst is testing the security of a corporate Wi-Fi network. The analyst uses a laptop to set up a rogue access point with the same SSID as the corporate network but with no encryption. Several employees' phones automatically connect to the rogue AP. The analyst then captures traffic and sees plaintext credentials for a web application. Which vulnerability is being exploited?

   • AThe web application is using weak encryption, allowing credentials to be captured.
   • BThe corporate network is using WEP, which is easily cracked.
   • CThe phones are not using a VPN, so traffic is exposed.
   • DThe phones are configured to auto-connect to any network with the same SSID, without verifying the network's security settings.
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A company issues laptops to employees who work in public spaces. A laptop is stolen from a coffee shop. Which control would have most effectively protected the data on the laptop?

   • AFull-disk encryption with a pre-boot password
   • BA laptop lock
   • CA screen protector that limits viewing angles
   • DA BIOS password
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A security analyst is evaluating the security of a new Android device model for corporate use. The device supports hardware-backed keystore, verified boot, and app sandboxing. The analyst wants to ensure that if the device is lost, the data on it remains protected. Which feature should the analyst verify is enabled by default?

   • AApp sandboxing, which prevents other apps from reading data
   • BHardware-backed keystore, which stores cryptographic keys securely
   • CFull-disk encryption (or file-based encryption) with a strong lock screen credential
   • DVerified boot, which ensures the OS has not been tampered with
   Reveal Solution Discussion Select an answer first
5. 39expert · medium

   A mobile app developer is reviewing the security of a finance app. The app uses a third-party library for analytics, which sends device information and usage data to the library's servers. The developer discovers that the library also has a known vulnerability that allows remote code execution. The app is not using the latest version of the library. What is the most immediate risk and the best action?

   • AThe vulnerability is only exploitable if the device is rooted, so it is a low risk.
   • BThe app's data is protected by the sandbox, so the vulnerability is not exploitable.
   • CThe analytics library is sending data to external servers, which is a privacy issue; remove the library entirely.
   • DThe vulnerable library could allow an attacker to execute arbitrary code on the device; update the library to the patched version immediately.
   Reveal Solution Discussion Select an answer first
6. 40application · easy

   An employee receives a text message that appears to be from their bank, asking them to click a link and verify their account. The employee clicks the link and enters their credentials. Which attack vector was used?

   • AA Bluetooth pairing attack
   • BA trojan embedded in a malicious app
   • CPhishing via SMS (smishing)
   • DA man-in-the-middle attack on a rogue access point
   Reveal Solution Discussion Select an answer first