How does application sandboxing limit the impact of mobile malware?

It blocks all network connections from the app

It prevents the app from being deleted by the user

It restricts the app's access to other apps' data and system resources

It encrypts all data stored on the device

A small business uses a mix of iOS and Android devices. They want to reduce the risk of malware from apps without implementing a full MDM. Which strategy is most effective?

Disable all app installations on the devices.

Allow users to install apps from any source but require them to read reviews first.

Install a third-party antivirus app on each device.

Restrict app installations to the official app stores and enable automatic OS updates.

A user receives a text message with a link to a free movie streaming app. The link leads to a website that prompts the user to enable 'Unknown sources' and install an APK. The user asks the IT helpdesk if this is safe. What should the helpdesk advise?

Install the app but only after scanning it with an antivirus app.

Do not install the app; it is likely malicious because it asks to enable unknown sources and is not from an official store.

Enable unknown sources and install the app, then uninstall it if it causes problems.

Install the app because it is free and from a reputable-looking website.

A company has experienced several mobile phishing incidents where employees entered credentials into fake login pages. The security team wants to reduce this risk. Which user education approach is most effective?

Conduct regular simulated phishing campaigns and provide immediate feedback to users who fall for them.

Post a poster in the break room with tips on how to spot phishing emails.

Send a one-time email to all employees warning them about phishing.

Require users to change their passwords every 30 days.

Which combination of practices is most effective for mitigating mobile malware in an enterprise environment?

Vetting apps before deployment, promptly applying OS updates, and training users on safe behavior

Disabling all third-party apps and using only preinstalled apps

Relying solely on antivirus software installed on each device

Encrypting all network traffic with a VPN and disabling Bluetooth

GIAC Mobile Device Security Analyst

Domain 4Objective 2

Mitigating Against Mobile Malware GMOB Practice Questions (Page 3)

Part of the Mobile Malware and Application Behavior domain, which makes up ~18% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 5–7 from this objective — we provide 50 practice questions to prepare you well beyond it. (estimate)

50questions here

10free pages

7concepts

Questions 11–15

11foundation · easy
How does application sandboxing limit the impact of mobile malware?
Select an answer first
12application · medium
A small business uses a mix of iOS and Android devices. They want to reduce the risk of malware from apps without implementing a full MDM. Which strategy is most effective?
Select an answer first
13application · medium
A user receives a text message with a link to a free movie streaming app. The link leads to a website that prompts the user to enable 'Unknown sources' and install an APK. The user asks the IT helpdesk if this is safe. What should the helpdesk advise?
Select an answer first
14application · medium
A company has experienced several mobile phishing incidents where employees entered credentials into fake login pages. The security team wants to reduce this risk. Which user education approach is most effective?
Select an answer first
15foundation · easy
Which combination of practices is most effective for mitigating mobile malware in an enterprise environment?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GMOB

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GMOB” is a trademark of its owner, used for identification only.