Mobile Applications ISE Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A smart agriculture company has a mobile app that lets farmers remotely start irrigation systems. The app uses MQTT over TLS to communicate with a cloud broker. A security review finds that the app does not validate the server certificate properly, making it vulnerable to man-in-the-middle attacks. Which remediation is the most direct and effective?

   • AImplement certificate pinning or strict certificate validation in the app
   • BSwitch from MQTT to CoAP with DTLS
   • CUse a VPN on the phone before connecting to the broker
   • DAdd a username and password to the MQTT connection
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A company is developing a mobile app for controlling medical IoT devices (e.g., insulin pumps). The app is subject to strict regulatory requirements, including validation of software updates. The company wants to release updates frequently to fix bugs and add features, but each update must go through a lengthy validation process. Which approach best balances the need for frequent updates with regulatory compliance?

   • ARelease updates as frequently as possible and perform validation after the update is deployed.
   • BRelease updates only to a small group of beta testers and skip validation for the general release.
   • CUse a continuous integration/continuous deployment (CI/CD) pipeline that includes automated validation tests, and release updates only after all tests pass.
   • DDelay all updates until a major version release, which is validated once a year.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which phase of the mobile IoT application lifecycle involves fixing bugs, adding features, and ensuring compatibility with new device firmware?

   • AMaintenance
   • BDevelopment
   • CDesign
   • DDeployment
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A smart lighting company is designing a mobile app for controlling lights in a large office building. The app will be used by facility managers and office workers. The facility managers need to control lights in bulk (e.g., turn off all lights on a floor), while office workers need to control only the lights in their immediate area. Which UX design approach best addresses the needs of both user groups?

   • AProvide a single interface with a search bar and a list of all lights, allowing users to select individual lights or groups.
   • BProvide two distinct modes: a 'Facility Manager' mode with floor-level controls and bulk actions, and a 'User' mode with controls for only the lights in the user's assigned area.
   • CProvide a single interface that shows all lights on a map, with no grouping or bulk actions.
   • DProvide a text-based command interface where users type commands like 'turn off floor 3 lights'.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is a recommended approach for securely storing sensitive data, such as tokens or credentials, on a mobile device used for IoT control?

   • AUse the platform's secure storage mechanisms, such as Android Keystore or iOS Keychain
   • BHard-code them into the application source code
   • CSend them to the cloud and never store them locally
   • DStore them in a plain text file in the app's internal storage
   Reveal Solution Discussion Select an answer first