
GIAC Mobile Device Security Analyst
Domain 1Objective 4
Unlocking and Rooting Mobile Devices GMOB Practice Questions (Page 6)
Part of the Mobile Device Management and Security domain, which makes up ~35% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~18–28 in this domain), expect 5–7 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)
47questions here
10free pages
7concepts
Questions 26–30
- 26
Which of the following is a consequence of unlocking a device's bootloader?
Select an answer first - 27
An organization has a policy that rooted devices are not allowed to access corporate email. An employee's device is rooted, and the MDM detects it. What is the most appropriate immediate action?
Select an answer first - 28
A security analyst is investigating a compromised Android device. The device's bootloader is unlocked, and the analyst finds a custom recovery image installed. Which statement accurately describes the relationship between these conditions and the device's security posture?
Select an answer first - 29
A security team is investigating a device that is rooted but has a locked bootloader. The device is running a recent version of Android with all security patches applied. Which rooting method is most plausible in this scenario?
Select an answer first - 30
An organization's MDM policy blocks rooted devices from accessing corporate resources. A user's device passes the MDM compliance check, but the security team suspects the device is rooted because the user has been discussing custom ROMs. Which detection method is most likely to catch a rooted device that passes basic checks?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GMOB” is a trademark of its owner, used for identification only.