Mitigating Against Mobile Malware GMOB Practice Questions (Page 10)

Questions 46–50

1. 46application · medium

   A company allows employees to use personal iPhones for work email. An employee wants to install a third-party keyboard app that requests 'Full Access' to all keystrokes. What should the security team advise?

   • AAllow installation but configure the keyboard to be used only in non-sensitive apps.
   • BAllow installation but disable network access for the keyboard app.
   • CDeny the request and recommend using the built-in keyboard or a vetted enterprise-approved keyboard.
   • DAllow installation because Apple's App Store review process ensures the app is safe.
   Reveal Solution Discussion Select an answer first
2. 47foundation · easy

   How does code signing in official app stores reduce the risk of malware?

   • AIt prevents users from installing any app that requests permissions
   • BIt ensures that apps are signed by a known developer and have not been tampered with after signing
   • CIt encrypts the app's network traffic to prevent interception
   • DIt automatically scans the device for other malware after installation
   Reveal Solution Discussion Select an answer first
4. 48application · medium

   A security analyst is reviewing a mobile app that requests permission to access the microphone, camera, and location, but the app's core functionality only requires internet access. The app is from an official store and is code-signed. What is the most effective mitigation to limit the app's potential impact?

   • ARely on the app store's review process to ensure the app is safe.
   • BUse an MDM to block the app from running in the background.
   • CUninstall the app because it is suspicious.
   • DDeny the unnecessary permissions at the OS level and allow only the permissions required for the app's function.
   Reveal Solution Discussion Select an answer first
5. 49application · medium

   A hospital's IT team is deploying new Android tablets for nurses. They want to reduce the risk of malware from third-party apps while allowing nurses to install a few approved productivity tools. Which approach best balances security and usability?

   • AEnable Android's sandboxing and rely on the OS to contain any malware that is installed.
   • BDisable the Play Store entirely and sideload all apps via USB from a central IT computer.
   • CInstruct nurses to only download apps from the official Play Store and avoid clicking suspicious links.
   • DEnroll the tablets in an MDM and deploy a whitelist of approved apps from the managed Play Store.
   Reveal Solution Discussion Select an answer first
6. 50foundation · easy

   Why is using secure Wi-Fi (e.g., WPA2/WPA3) important for mitigating mobile malware?

   • AIt prevents any malware from being installed on the device
   • BIt increases the device's battery life
   • CIt blocks all advertisements in apps
   • DIt encrypts wireless traffic, reducing the risk of man-in-the-middle attacks that can deliver malware
   Reveal Solution Discussion Select an answer first