A company's sales team frequently travels and uses public Wi-Fi in hotels and airports. The security team wants to reduce the risk of malware communicating with command-and-control servers. Which network-level control should they implement on company-issued mobile devices?

Require a VPN that routes all traffic through the corporate gateway with egress filtering.

Enable the device's built-in firewall to block all incoming connections.

Disable Wi-Fi on all devices and require the use of cellular data only.

Instruct users to only connect to Wi-Fi networks that require a password.

What is the role of the app review process in official app stores?

To manually and/or automatically inspect apps for policy violations and known malicious patterns before publication

To determine the price of each app

To provide customer support for app-related issues

To guarantee that no app will ever be malicious after approval

A developer is creating an Android app for a company. The app needs to access the camera to scan documents but does not need to access the microphone. What is the best way to minimize the app's attack surface?

Request only the camera permission at runtime when the user scans a document.

Declare both permissions in the manifest but only use the camera.

Request both camera and microphone permissions in case they are needed later.

Use a third-party library that requests all permissions automatically.

A company's incident response team is responding to a mobile malware infection on a device that contains sensitive client data. The malware is suspected of exfiltrating data via the device's camera and microphone. The team needs to contain the threat while preserving evidence for a potential legal case. Which action best balances containment and evidence preservation?

Disable the camera and microphone via MDM and continue monitoring.

Immediately wipe the device to ensure the malware is removed.

Remove the device from the MDM and let the user continue using it.

Place the device in airplane mode and perform a logical acquisition.

What is a key topic to include in user education to help employees avoid mobile malware?

How to identify phishing messages and avoid clicking suspicious links

How to increase the device's screen resolution

How to use social media apps more efficiently

How to change the device's ringtone

GIAC Mobile Device Security Analyst

Domain 4Objective 2

Mitigating Against Mobile Malware GMOB Practice Questions (Page 1)

Part of the Mobile Malware and Application Behavior domain, which makes up ~18% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 5–7 from this objective — we provide 50 practice questions to prepare you well beyond it. (estimate)

50questions here

10free pages

7concepts

Questions 1–5

1application · medium
A company's sales team frequently travels and uses public Wi-Fi in hotels and airports. The security team wants to reduce the risk of malware communicating with command-and-control servers. Which network-level control should they implement on company-issued mobile devices?
Select an answer first
2foundation · easy
What is the role of the app review process in official app stores?
Select an answer first
3application · medium
A developer is creating an Android app for a company. The app needs to access the camera to scan documents but does not need to access the microphone. What is the best way to minimize the app's attack surface?
Select an answer first
4expert · hard
A company's incident response team is responding to a mobile malware infection on a device that contains sensitive client data. The malware is suspected of exfiltrating data via the device's camera and microphone. The team needs to contain the threat while preserving evidence for a potential legal case. Which action best balances containment and evidence preservation?
Select an answer first
5foundation · easy
What is a key topic to include in user education to help employees avoid mobile malware?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GMOB

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GMOB” is a trademark of its owner, used for identification only.