What is the goal of reverse engineering resistance in a mobile app?

To make it difficult for attackers to understand and modify the app's code

To reduce the app's memory footprint

To improve the app's user interface

What is the primary purpose of static analysis in mobile app security testing?

To test the app's user interface responsiveness

To examine the app's code and resources without executing it

To intercept network traffic between the app and server

To observe the app's behavior while it is running

In threat modeling for a mobile app, which of the following is considered a mobile-specific asset?

The user's contacts and location data stored on the device

The app's customer support phone number

The app's color scheme and branding

The company's office building security cameras

What is a common weakness in mobile app session handling?

Storing session tokens in the device's secure enclave

Implementing multi-factor authentication

Using HTTPS for all communication

Using a long-lived session token that never expires

On Android, what is the purpose of the permission system?

To determine the app's color scheme

To set the app's default language

To manage the app's network speed

To control what resources and data an app can access

GIAC Mobile Device Security Analyst

Domain 2Objective 2

Mobile Application Security Assessments GMOB Practice Questions (Page 3)

Part of the Mobile Application Analysis and Assessment domain, which makes up ~32% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~16–26 in this domain), expect 5–9 from this objective — we provide 58 practice questions to prepare you well beyond it. (estimate)

58questions here

12free pages

12concepts

Questions 11–15

11foundation · easy
What is the goal of reverse engineering resistance in a mobile app?
Select an answer first
12foundation · easy
What is the primary purpose of static analysis in mobile app security testing?
Select an answer first
13foundation · easy
In threat modeling for a mobile app, which of the following is considered a mobile-specific asset?
Select an answer first
14foundation · easy
What is a common weakness in mobile app session handling?
Select an answer first
15foundation · easy
On Android, what is the purpose of the permission system?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GMOB

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GMOB” is a trademark of its owner, used for identification only.