Mobile Device Threats and Security Controls NDE Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company's IT department wants to enforce a policy that all corporate-owned smartphones must have a passcode, be encrypted, and have the ability to be remotely wiped if lost. Which technology should they use to enforce these requirements?

   • AMobile device management (MDM) with compliance policies
   • BA VPN client that encrypts all network traffic
   • CA mobile antivirus product with real-time scanning
   • DA firewall that blocks unauthorized connections
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which type of mobile threat typically involves an attacker intercepting or redirecting traffic between a mobile device and a legitimate server?

   • AA lost device that is later found and used by an unauthorized person
   • BA network-based attack such as a man-in-the-middle attack
   • CA malicious app that steals contacts
   • DA phishing email that tricks the user into revealing credentials
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A security analyst is investigating a mobile device that was compromised. The device is an Android phone with the latest OS. The analyst discovers that a malicious app was installed from a third-party store and that the app has been reading the device's clipboard, which contained a password. Which built-in Android feature should have prevented the app from reading the clipboard?

   • AThe permission system, which should have required the user to grant clipboard access
   • BThe app sandbox, which isolates the app from other apps
   • CThe clipboard access restriction that requires the app to be in the foreground or have user permission
   • DThe device's encryption, which should have protected the clipboard data
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A user installs a legitimate-looking flashlight app that requests access to contacts, location, and microphone. The user grants these permissions. Later, the user notices unusual data usage and contacts being uploaded. Which mobile OS security feature failed to prevent this?

   • AFull-disk encryption
   • BSecure boot
   • CPermission-based access control
   • DApp sandboxing
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which of the following is a primary security concern when employees use their personal devices for work under a BYOD policy?

   • AThe device may contain both personal and corporate data, making it harder to enforce security controls
   • BThe device is always connected to a corporate VPN
   • CThe device is physically located in the office at all times
   • DThe device is automatically updated with the latest OS patches
   Reveal Solution Discussion Select an answer first