Mobile Applications ISE Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   In a typical IoT ecosystem, what is the primary role of a mobile application?

   • ATo physically manage the network connectivity of all IoT devices
   • BTo act as the main data storage and processing engine for all IoT data
   • CTo replace the need for any cloud or gateway in the IoT architecture
   • DTo serve as the user interface and control point for interacting with IoT devices
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A smart home company is designing a mobile app to control various IoT devices, including lights, locks, and cameras. The devices use different communication protocols (Zigbee, Z-Wave, Wi-Fi). The company wants to provide a unified user experience where the app can control all devices through a single interface. Which architectural pattern best supports this requirement?

   • AThe app relies on the cloud to translate protocols and does not require any local gateway.
   • BThe app uses a separate interface for each device type to avoid protocol conflicts.
   • CThe app connects directly to each device using its native protocol.
   • DThe app communicates with a central smart home hub that abstracts the underlying protocols and exposes a unified API.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A medical device manufacturer is developing a mobile app that allows patients to monitor and control their insulin pumps via Bluetooth. The app stores sensitive health data locally on the device and communicates with a cloud backend for remote monitoring by clinicians. A security auditor flags that the app's local database is unencrypted and that Bluetooth pairing uses a static PIN. Which combination of security controls should the development team implement to address these findings?

   • AStore data only in the cloud and require the user to enter a password every time the app connects to the insulin pump.
   • BRely on the operating system's default app sandbox and use a fixed 6-digit PIN for Bluetooth pairing.
   • CEncrypt the database with a hardcoded key in the app binary and disable Bluetooth pairing after the first connection.
   • DUse the device's hardware-backed keystore for encryption keys and implement Bluetooth LE Secure Connections with numeric comparison pairing.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A medical-device manufacturer is developing a mobile app that lets clinicians adjust infusion pump settings over the internet. The app stores a local cache of patient settings for offline viewing. The security team requires that cached data remain protected if the phone is lost, and that all remote commands be authenticated and encrypted. Which combination of controls best meets these requirements?

   • AUse plaintext cache to avoid performance overhead, and rely on the cloud API's built-in rate limiting
   • BEncrypt the cache with a key derived from the user's PIN, and use mutual TLS with client certificates for remote commands
   • CStore cache in the app sandbox with no extra encryption, and use HTTPS for all API calls
   • DDisable offline caching entirely and require a live connection for every screen
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which testing approach allows developers to test a mobile IoT app without needing physical hardware by using a software model of the device?

   • ASimulation
   • BBeta testing
   • CPenetration testing
   • DReal-device testing
   Reveal Solution Discussion Select an answer first