Which of the following is a security concern when analyzing an Android app's manifest?

An activity is exported without a permission requirement

The app uses the default launcher icon

The app declares the INTERNET permission

The app targets a recent Android SDK version

You are reverse engineering an iOS app and find a function that appears to validate a license key. You want to understand the validation logic without executing the app. Which technique is most appropriate?

Use `class-dump` to extract the method signatures and infer the logic.

Use `strings` to search for the license key format.

Use LLDB to set a breakpoint and inspect the function's arguments at runtime.

Use a disassembler like Hopper or Ghidra to analyze the function's assembly code.

What is the benefit of using automation in mobile application analysis?

It speeds up repetitive tasks and ensures consistent coverage

It guarantees the discovery of all vulnerabilities

It completely eliminates the need for manual analysis

It automatically fixes all identified security issues

You are reviewing the source code of a mobile app and notice that it uses `WebView` with `setJavaScriptEnabled(true)` and `addJavascriptInterface` to expose a native method. What is the primary security risk?

The WebView will automatically log all user input.

A malicious website loaded in the WebView can call the exposed native method, leading to arbitrary code execution or data theft.

The WebView will not be able to load HTTPS websites.

The WebView will consume too much memory, causing performance issues.

In a mobile application security assessment, what is the primary purpose of static analysis?

Intercepting and modifying network traffic between the app and its backend servers

Examining the app's code, binaries, and configuration files without executing the app

Executing the app in a controlled environment to observe its behavior and network communications

Attaching a debugger to the running app to inspect and alter its memory contents

GIAC Mobile Device Security Analyst

Domain 2Objective 1

Analyzing Mobile Applications GMOB Practice Questions (Page 3)

Part of the Mobile Application Analysis and Assessment domain, which makes up ~32% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~16–26 in this domain), expect 5–9 from this objective — we provide 57 practice questions to prepare you well beyond it. (estimate)

57questions here

12free pages

12concepts

Questions 11–15

11foundation · easy
Which of the following is a security concern when analyzing an Android app's manifest?
Select an answer first
12application · medium
You are reverse engineering an iOS app and find a function that appears to validate a license key. You want to understand the validation logic without executing the app. Which technique is most appropriate?
Select an answer first
13foundation · easy
What is the benefit of using automation in mobile application analysis?
Select an answer first
14application · medium
You are reviewing the source code of a mobile app and notice that it uses `WebView` with `setJavaScriptEnabled(true)` and `addJavascriptInterface` to expose a native method. What is the primary security risk?
Select an answer first
15foundation · easy
In a mobile application security assessment, what is the primary purpose of static analysis?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GMOB

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GMOB” is a trademark of its owner, used for identification only.