A company's mobile devices are configured to use a VPN for all traffic. However, some users report that certain apps do not work when the VPN is enabled. The security team suspects that the VPN is blocking traffic to legitimate services. What is the best approach to maintain security while resolving the issue?

Ask users to disconnect the VPN when using those apps.

Use a different VPN protocol that is less restrictive.

Remove the VPN requirement entirely to improve usability.

Disable the VPN for those specific apps using split tunneling.

An organization is considering allowing employees to use a third-party app store to access a niche productivity tool not available in the official store. The security team is asked to evaluate the risk. What is the primary security concern with this approach?

The app will not be able to use the device's camera.

The app will automatically have access to all device data.

Apps from third-party stores may not undergo the same code review and signing validation as official stores.

Third-party stores always require jailbreaking or rooting the device.

What is the primary purpose of app vetting as a mobile malware mitigation strategy?

To automatically remove any app that has ever been flagged by a security vendor

To review apps for malicious behavior or excessive permissions before they are deployed

To ensure all apps are free of cost and available to all employees

To verify that apps are compatible with the device hardware

An organization is deploying Android devices with a custom enterprise app. They want to limit the app's access to sensitive data if the device is compromised. Which configuration best leverages Android's permission model?

Use runtime permissions to grant only the permissions the app needs for its core functions.

Grant the app all permissions at install time to avoid runtime prompts.

Disable the permission system entirely for the enterprise app to improve performance.

Grant permissions only when the device is connected to the corporate Wi-Fi.

An employee wants to install an app that is not available in the official app store but is popular on a third-party website. The app requests access to contacts and SMS. What should the security team advise?

Allow the installation because the app is popular and has good reviews.

Deny the installation and explain the risks of sideloading and excessive permissions.

Allow the installation but revoke the app's access to contacts and SMS.

Allow the installation because the device's sandbox will prevent any harm.

GIAC Mobile Device Security Analyst

Domain 4Objective 2

Mitigating Against Mobile Malware GMOB Practice Questions (Page 9)

Part of the Mobile Malware and Application Behavior domain, which makes up ~18% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 5–7 from this objective — we provide 50 practice questions to prepare you well beyond it. (estimate)

50questions here

10free pages

7concepts

Questions 41–45

41expert · hard
A company's mobile devices are configured to use a VPN for all traffic. However, some users report that certain apps do not work when the VPN is enabled. The security team suspects that the VPN is blocking traffic to legitimate services. What is the best approach to maintain security while resolving the issue?
Select an answer first
42application · medium
An organization is considering allowing employees to use a third-party app store to access a niche productivity tool not available in the official store. The security team is asked to evaluate the risk. What is the primary security concern with this approach?
Select an answer first
43foundation · easy
What is the primary purpose of app vetting as a mobile malware mitigation strategy?
Select an answer first
44application · medium
An organization is deploying Android devices with a custom enterprise app. They want to limit the app's access to sensitive data if the device is compromised. Which configuration best leverages Android's permission model?
Select an answer first
45application · medium
An employee wants to install an app that is not available in the official app store but is popular on a third-party website. The app requests access to contacts and SMS. What should the security team advise?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GMOB

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GMOB” is a trademark of its owner, used for identification only.