Analyzing Mobile Applications GMOB Practice Questions (Page 12)

Questions 56–57

1. 56application · medium

   You are analyzing an Android app that handles payment information. You suspect that the app may leave sensitive data in memory after the user logs out. Which technique would best confirm this?

   • AUse Frida to dump the heap after logout and search for the payment data or authentication tokens.
   • BUse a network proxy to see if the payment data is sent after logout.
   • CUse `dumpsys meminfo` to check the app's memory usage and look for anomalies.
   • DUse `adb shell run-as` to access the app's private storage and look for cached data.
   Reveal Solution Discussion Select an answer first
2. 57application · medium

   You are performing dynamic analysis of an Android app that uses end-to-end encryption for its chat feature. You need to verify that the encryption is implemented correctly and that no plaintext data is leaked through side channels. Which combination of techniques would provide the most comprehensive evidence?

   • AOnly use a network proxy to capture traffic and verify that the payload is encrypted.
   • BUse a jailbroken/rooted device to inspect the app's sandbox and look for plaintext files.
   • CUse a static analysis tool to review the encryption algorithm implementation.
   • DCapture network traffic with a proxy and simultaneously perform a memory dump while the app is sending a message.
   Reveal Solution Discussion Select an answer first