A security team is evaluating the risk of a third-party app store that hosts repackaged versions of popular apps. They want to implement a mitigation that would make it harder for attackers to repackage apps and also help users detect tampered versions. Which combination of measures is most effective?

Requiring users to enable 'Unknown sources' to install apps from any store

Publishing the app's source code to allow users to verify its integrity

Code obfuscation and integrity checks that verify the app's signature at runtime

Using a debugger to monitor app behavior after installation

What is a primary security risk of repackaging a legitimate mobile application?

The repackaged app will lose all functionality of the original app

The repackaged app will have a different package name, making it easy to identify

The repackaged app will always be detected by the app store's security scans

The repackaged app can contain malicious code that runs with the original app's permissions

GIAC Mobile Device Security Analyst

Domain 4Objective 1

Manipulating Mobile Application Behavior GMOB Practice Questions (Page 8)

Part of the Mobile Malware and Application Behavior domain, which makes up ~18% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 5–7 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

5concepts

Questions 36–37

36application · medium
A security team is evaluating the risk of a third-party app store that hosts repackaged versions of popular apps. They want to implement a mitigation that would make it harder for attackers to repackage apps and also help users detect tampered versions. Which combination of measures is most effective?
Select an answer first
37foundation · easy
What is a primary security risk of repackaging a legitimate mobile application?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GMOB

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GMOB” is a trademark of its owner, used for identification only.

Manipulating Mobile Application Behavior GMOB Practice Questions (Page 8)

Questions 36–37

What is a primary security risk of repackaging a legitimate mobile application?

Keep studying — Mobile Malware and Application Behavior