Mobile Device Threats and Security Controls NDE Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A developer is creating a mobile app that will handle sensitive user data. The developer wants to ensure that the app is secure against common threats. Which set of practices should the developer follow?

   • ARely on the app store's security review and publish the app quickly
   • BUse a third-party library for all functionality without reviewing its code
   • CUse secure coding practices, encrypt sensitive data at rest, and validate all input
   • DDisable all logging and error messages to prevent information leakage
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A consulting firm issues corporate-owned laptops and smartphones to its field consultants. The devices contain confidential client documents. The security team wants to ensure that if a device is stolen, the data cannot be read even if the attacker removes the storage chip and connects it to another machine. Which control should be implemented?

   • ADeploy an MDM agent that can perform a remote wipe
   • BEnable full-disk encryption with a strong passcode and hardware-backed key storage
   • CRequire a VPN for all network connections
   • DInstall a mobile antivirus app
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which technology creates a secure, encrypted tunnel for mobile device traffic over an untrusted network?

   • AMobile hotspot
   • BBluetooth pairing
   • CVirtual Private Network (VPN)
   • DNear Field Communication (NFC)
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which mobile OS security feature restricts an app's access to other apps' data and system resources?

   • ATwo-factor authentication
   • BRemote wipe
   • CVPN support
   • DApp sandboxing
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A financial advisor frequently travels and uses public Wi-Fi in hotels and airports to access client portfolios. The company's security policy requires that all client data be encrypted in transit. The advisor's laptop does not support hardware encryption, and the company's VPN is sometimes blocked by the hotel's network. Which solution provides the most reliable protection for client data in transit?

   • AUse a free public VPN service from the internet
   • BDisable the VPN and rely on the web application's HTTPS encryption
   • CUse the hotel's wired Ethernet connection instead of Wi-Fi
   • DUse a personal hotspot from the advisor's smartphone with a strong password and connect the laptop to it
   Reveal Solution Discussion Select an answer first