Analyzing Mobile Applications GMOB Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   In a mobile app code review, which of the following is a security vulnerability?

   • ALogging sensitive user data, such as passwords, to the system log
   • BImplementing biometric authentication for user login
   • CEncrypting data with AES-256 before storing it in a database
   • DUsing certificate pinning to validate the server's SSL certificate
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   You are intercepting traffic from a mobile app and notice that it sends a request to an API endpoint with a timestamp and a hash of the timestamp plus a secret key. The secret key is hardcoded in the app. What is the most significant weakness?

   • AThe hash algorithm is weak and can be broken.
   • BThe API endpoint is not using HTTPS.
   • CThe hardcoded secret key can be extracted, allowing an attacker to forge valid requests.
   • DThe timestamp is not encrypted, so an attacker can replay the request.
   Reveal Solution Discussion Select an answer first
4. 33expert · hard

   You are analyzing an iOS app that uses `NSURLSession` with certificate pinning. The app is protected by anti-debugging measures that detect `ptrace` and crash if a debugger is attached. You need to bypass the pinning to intercept traffic. Which approach is most effective?

   • AUse Frida to hook `SecTrustEvaluateWithError` and the anti-debugging function, and disable both.
   • BUse a proxy with a CA certificate and set `NSAllowsArbitraryLoads` to true in the app's Info.plist.
   • CDisable the anti-debugging by patching the binary with `optool` and re-signing the app.
   • DUse `lldb` to attach to the process and set breakpoints on the pinning function, then modify the return value.
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   You are analyzing a Flutter-based Android app. You need to understand the app's business logic and identify hidden functionality such as hardcoded API keys. You have the APK file. Which approach is the most efficient first step?

   • AUse `apktool` to decode resources and smali, then manually read the smali code to understand the logic.
   • BRun `strings` on the APK file to extract all readable strings and look for API keys.
   • CDecompile the APK with jadx to inspect the Java/Kotlin code and resources, then search for strings and API endpoints.
   • DUse a network proxy to capture traffic and infer the API endpoints from the requests.
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   Which of the following is an insecure data storage practice in a mobile app?

   • AEncrypting sensitive data with a key stored in the Android Keystore
   • BStoring a user's password in plaintext in SharedPreferences
   • CUsing SQLCipher to encrypt a SQLite database
   • DStoring data in the app's internal storage directory
   Reveal Solution Discussion Select an answer first