After completing a reverse engineering assessment of a mobile app, the analyst must present findings to both technical and non-technical stakeholders. The report should highlight the most critical security risks and provide actionable recommendations. Which approach is most effective?

Create an executive summary that lists the top risks and recommendations, with a separate technical appendix.

Focus solely on the vulnerabilities found, without recommendations, to keep the report concise.

Only share the report with the development team to avoid alarming management.

Provide a detailed technical report with code snippets and assembly listings.

Which file in an Android app's data directory typically stores structured data in a key-value format?

shared_prefs/app_preferences.xml

A company wants to assess the security of its own mobile app before release. The app uses obfuscation and anti-tampering protections. The company's goal is to identify vulnerabilities that could be exploited by attackers. Which reverse engineering approach is most aligned with this goal?

Focus on vulnerability discovery by attempting to bypass the app's protections and find weaknesses.

Focus on data extraction to see if sensitive data is exposed.

Focus on intellectual property protection to ensure the app's code is not copied.

Focus on malware analysis to see if the app contains any malicious code.

A developer wants to ensure that competitors cannot easily copy the proprietary algorithms in their mobile app. Which reverse engineering goal does this represent?

Intellectual property protection

GIAC Mobile Device Security Analyst

Domain 2Objective 3

Reverse Engineering Mobile Applications GMOB Practice Questions (Page 2)

Part of the Mobile Application Analysis and Assessment domain, which makes up ~32% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~16–26 in this domain), expect 5–9 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

8concepts

Questions 6–10

6application · medium
After completing a reverse engineering assessment of a mobile app, the analyst must present findings to both technical and non-technical stakeholders. The report should highlight the most critical security risks and provide actionable recommendations. Which approach is most effective?
Select an answer first
7foundation · easy
Which section of a reverse engineering report should include specific steps to mitigate identified vulnerabilities?
Select an answer first
8foundation · easy
Which file in an Android app's data directory typically stores structured data in a key-value format?
Select an answer first
9expert · hard
A company wants to assess the security of its own mobile app before release. The app uses obfuscation and anti-tampering protections. The company's goal is to identify vulnerabilities that could be exploited by attackers. Which reverse engineering approach is most aligned with this goal?
Select an answer first
10foundation · easy
A developer wants to ensure that competitors cannot easily copy the proprietary algorithms in their mobile app. Which reverse engineering goal does this represent?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GMOB

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GMOB” is a trademark of its owner, used for identification only.