You are analyzing a compiled iOS app binary and want to identify hardcoded API keys and URLs. Which tool is most appropriate for this task?

Use `strings` to extract printable strings from the binary and search for patterns like 'api_key' or 'https://'.

Use `nm` to list symbols and find the API key variable names.

Use `otool` to dump the Objective-C class information and method names.

Use `codesign` to verify the app's signature and extract embedded entitlements.

You need to analyze a large number of Android APKs for common insecure practices like hardcoded secrets and exported components. You want to automate the initial triage. Which tool is best suited for this?

Use `strings` on each APK to search for secrets.

Use MobSF (Mobile Security Framework) to perform automated static analysis and generate a report.

Use `apktool` to decode each APK and manually inspect the smali code.

Use `jadx` to decompile each APK and search for vulnerabilities manually.

You are analyzing an Android APK and notice that the AndroidManifest.xml declares an activity with the attribute `android:exported="true"` and includes an intent filter for a custom scheme. What is the primary security concern?

The activity's data will be automatically backed up to the cloud.

The app will crash if the custom scheme is not registered with the system.

Other apps can launch this activity and potentially pass malicious data to it.

The app's signing certificate is exposed to other apps.

Which technique is an example of runtime manipulation?

Using Wireshark to capture network packets

Using JADX to decompile the app's Java code

Using APKTool to decode the app's resources

Using Frida to hook a function and change its return value

What is the goal of reverse engineering a mobile application?

To review the app's user interface for design flaws

To test the app's performance under load

To capture and analyze the app's network traffic

To understand the app's logic and uncover hidden functionality

GIAC Mobile Device Security Analyst

Domain 2Objective 1

Analyzing Mobile Applications GMOB Practice Questions (Page 6)

Part of the Mobile Application Analysis and Assessment domain, which makes up ~32% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~16–26 in this domain), expect 5–9 from this objective — we provide 57 practice questions to prepare you well beyond it. (estimate)

57questions here

12free pages

12concepts

Questions 26–30

26application · medium
You are analyzing a compiled iOS app binary and want to identify hardcoded API keys and URLs. Which tool is most appropriate for this task?
Select an answer first
27application · medium
You need to analyze a large number of Android APKs for common insecure practices like hardcoded secrets and exported components. You want to automate the initial triage. Which tool is best suited for this?
Select an answer first
28application · medium
You are analyzing an Android APK and notice that the AndroidManifest.xml declares an activity with the attribute `android:exported="true"` and includes an intent filter for a custom scheme. What is the primary security concern?
Select an answer first
29foundation · easy
Which technique is an example of runtime manipulation?
Select an answer first
30foundation · easy
What is the goal of reverse engineering a mobile application?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GMOB

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GMOB” is a trademark of its owner, used for identification only.