On mobile operating systems, what is the purpose of requesting permissions from the user before an app can access certain features?

To reduce the device's data usage

To speed up the app's installation process

To ensure the app is free of malware

To allow the user to control what data and functions the app can use

A law firm is implementing a BYOD policy for attorneys. The firm requires that client data be protected, but attorneys want to use personal devices without intrusive monitoring. The firm also needs to comply with data residency regulations that require client data to remain within the country. Which approach best balances these requirements?

Require all attorneys to use company-owned devices with full-device monitoring.

Allow attorneys to use personal devices but require a VPN and full-disk encryption.

Prohibit BYOD and require attorneys to use virtual desktops accessed via a secure portal.

Enroll devices in an MDM with containerization and enforce a policy that corporate data is stored only in the container, which is backed up to a domestic cloud.

A user installs a free QR-code scanner app from an official app store. The app requests permission to read the device's SMS messages and access the camera. The user grants both. Later, the app is found to be reading SMS messages containing one-time passcodes and forwarding them to an attacker. Which mobile app security best practice would have mitigated this threat?

Installing the app only from the official app store

Using a third-party antivirus app to scan the QR code scanner

Enabling full-disk encryption on the device

Reviewing and denying unnecessary permissions, such as SMS access, during installation

A company's sales team uses mobile devices to access a customer relationship management (CRM) system. The team frequently works from coffee shops and other public locations. The security team wants to ensure that the CRM data is protected from network-based attacks. Which combination of controls should be implemented?

Use a mobile firewall that blocks all inbound connections

Require the CRM app to use TLS and enforce a VPN for all corporate traffic

Enable two-factor authentication for the CRM app

Disable Wi-Fi on all mobile devices and use only cellular data

EC-CouncilNetwork Defense Essentials

Domain 5Objective 4

Mobile Device Threats and Security Controls NDE Practice Questions (Page 2)

Part of the Wireless, Mobile, and IoT Security domain, which makes up ~17% of our current practice bank.

46questions here

10free pages

6concepts

Questions 6–10

6foundation · easy
On mobile operating systems, what is the purpose of requesting permissions from the user before an app can access certain features?
Select an answer first
7expert · hard
A law firm is implementing a BYOD policy for attorneys. The firm requires that client data be protected, but attorneys want to use personal devices without intrusive monitoring. The firm also needs to comply with data residency regulations that require client data to remain within the country. Which approach best balances these requirements?
Select an answer first
8application · medium
A user installs a free QR-code scanner app from an official app store. The app requests permission to read the device's SMS messages and access the camera. The user grants both. Later, the app is found to be reading SMS messages containing one-time passcodes and forwarding them to an attacker. Which mobile app security best practice would have mitigated this threat?
Select an answer first
9expert · hard
A company's sales team uses mobile devices to access a customer relationship management (CRM) system. The team frequently works from coffee shops and other public locations. The security team wants to ensure that the CRM data is protected from network-based attacks. Which combination of controls should be implemented?
Select an answer first
10application · medium
A user receives a text message that appears to be from their bank, asking them to click a link and verify their account. The user clicks the link and enters their credentials. Which type of mobile threat occurred?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NDE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “NDE” is a trademark of its owner, used for identification only.

Mobile Device Threats and Security Controls NDE Practice Questions (Page 2)

Questions 6–10

On mobile operating systems, what is the purpose of requesting permissions from the user before an app can access certain features?

A user receives a text message that appears to be from their bank, asking them to click a link and verify their account. The user clicks the link and enters their credentials. Which type of mobile threat occurred?

Keep studying — Wireless, Mobile, and IoT Security