A security analyst is evaluating the risk of allowing rooted devices in the enterprise. Which security implication is the most direct consequence of rooting an Android device?

Apps can gain elevated privileges and access data from other apps.

The device becomes permanently locked to the carrier.

The device can no longer connect to cellular networks.

The device's warranty becomes void.

A company is considering allowing rooted devices for a small group of developers who need to test security features. The developers require access to corporate source code repositories. Which mitigation strategy provides the strongest protection for corporate data?

Allow rooted devices but require the developers to sign a waiver.

Allow rooted devices but only for testing on a separate network segment.

Allow rooted devices but require the developers to use a VPN.

Provide the developers with dedicated, non-corporate devices that are allowed to be rooted, and do not allow these devices to access corporate resources.

A user wants to install a custom ROM on their Android device. The device's bootloader is locked, and the manufacturer does not provide an official unlocking tool. Which method is most likely to succeed?

Use a third-party tool that exploits a known vulnerability in the device's firmware to unlock the bootloader.

Use the manufacturer's official bootloader unlock code obtained from the device settings.

Enable 'Unknown sources' in the settings and install the custom ROM directly from the SD card.

Perform a factory reset and then use the device's built-in 'Flash custom ROM' option.

What is the primary difference between unlocking a mobile device's bootloader and rooting an Android device?

Unlocking the bootloader is performed by the manufacturer, while rooting is performed by the user.

Unlocking the bootloader removes carrier restrictions, while rooting replaces the entire operating system.

Unlocking the bootloader is a software-only process, while rooting requires physical disassembly of the device.

Unlocking the bootloader allows the device to boot unsigned or modified code, while rooting grants the user administrative (superuser) privileges within the Android OS.

A security analyst is comparing the risks of two devices: one is rooted via an official bootloader unlock, and the other is rooted via a third-party exploit. Which statement accurately compares the security risks?

The exploit-rooted device is at higher risk because it relies on an unpatched vulnerability that malware could also use.

Both devices have the same security risk because they are both rooted.

The officially unlocked device is at higher risk because the bootloader is unlocked, which is more dangerous than an exploit.

The officially unlocked device is more secure because the bootloader is unlocked in a controlled manner.

GIAC Mobile Device Security Analyst

Domain 1Objective 4

Unlocking and Rooting Mobile Devices GMOB Practice Questions (Page 2)

Part of the Mobile Device Management and Security domain, which makes up ~35% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~18–28 in this domain), expect 5–7 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)

47questions here

10free pages

7concepts

Questions 6–10

6application · medium
A security analyst is evaluating the risk of allowing rooted devices in the enterprise. Which security implication is the most direct consequence of rooting an Android device?
Select an answer first
7expert · hard
A company is considering allowing rooted devices for a small group of developers who need to test security features. The developers require access to corporate source code repositories. Which mitigation strategy provides the strongest protection for corporate data?
Select an answer first
8application · medium
A user wants to install a custom ROM on their Android device. The device's bootloader is locked, and the manufacturer does not provide an official unlocking tool. Which method is most likely to succeed?
Select an answer first
9foundation · easy
What is the primary difference between unlocking a mobile device's bootloader and rooting an Android device?
Select an answer first
10expert · hard
A security analyst is comparing the risks of two devices: one is rooted via an official bootloader unlock, and the other is rooted via a third-party exploit. Which statement accurately compares the security risks?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GMOB

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GMOB” is a trademark of its owner, used for identification only.