Unlocking and Rooting Mobile Devices GMOB Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A user rooted their Android device to use a firewall app that requires root access. The device is enrolled in the company's MDM. Which security risk is most directly increased by rooting, even if the user only installs trusted apps?

   • AThe device's screen will be more prone to cracking.
   • BThe device will no longer receive any software updates.
   • CThe device is more vulnerable to malware because root access can be exploited by malicious apps to gain full control.
   • DThe device's battery life will decrease significantly.
   Reveal Solution Discussion Select an answer first
2. 37expert · hard

   An organization uses an MDM that relies on SafetyNet attestation to detect rooted devices. A user's device is rooted but passes the attestation check because the user has installed a Magisk module that hides root from SafetyNet. The security team suspects the device is rooted because the user has been discussing custom ROMs. Which additional detection method is most likely to identify the root?

   • AReview the device's system logs for root-related entries.
   • BCheck the device's bootloader status using fastboot commands.
   • CUse a third-party root detection app that checks for multiple root indicators.
   • DCheck for the presence of the Magisk app in the installed app list.
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A company's BYOD policy allows personal devices but prohibits rooting. An employee's device is detected as rooted. The employee uses the device for both personal and work activities. Which action best mitigates the risk to corporate data while respecting the employee's personal use?

   • APerform a full factory reset of the device.
   • BAllow the device to remain compliant because the employee promises to be careful.
   • CUse the MDM to selectively wipe corporate data and remove corporate apps from the device.
   • DBlock the device from the corporate Wi-Fi network only.
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   An organization has a BYOD policy that allows rooted Android devices but requires that corporate data be protected. An employee's device is rooted and enrolled in the MDM. Which control is most effective at preventing a malicious app with root access from exfiltrating corporate email attachments?

   • ASet the corporate email server to require certificate-based authentication.
   • BUse an MDM container that encrypts corporate data and restricts which apps can access it.
   • CEnable remote wipe on the device.
   • DConfigure the MDM to enforce a screen-lock password and require encryption.
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   An organization allows employees to use personal Android devices for work email and calendar. The MDM policy currently does not address rooting. After a security incident involving a rooted device, management wants to reduce risk without banning personal devices entirely. Which policy approach best balances usability and security?

   • ARequire the MDM to detect root status and, if detected, block access to corporate email and calendar while leaving other device functions intact.
   • BAllow rooted devices but require the user to sign a waiver accepting all risks.
   • CProhibit the use of personal devices for any corporate data and require all employees to use company-issued devices.
   • DAutomatically wipe any device that is detected as rooted, regardless of whether corporate data is present.
   Reveal Solution Discussion Select an answer first