ALISON Wireless & Mobile Security 2

Question 1

What does MDM stand for in the context of enterprise mobile security?

Accepted Answer

Mobile Device Management

Answer

Mobile Data Management

Answer

Multi-Domain Monitoring

Answer

Managed Device Module

Question 2

What is 'jailbreaking' a mobile device?

Accepted Answer

Exploiting OS vulnerabilities to remove manufacturer/carrier restrictions and gain root access

Answer

Unlocking a carrier-locked phone to use any SIM

Answer

Resetting a device to factory settings to remove malware

Answer

Encrypting device storage to protect data at rest

Question 3

What is a SIM swapping attack?

Accepted Answer

Socially engineering a carrier into transferring a victim's phone number to an attacker-controlled SIM

Answer

Installing spyware via a malicious SIM card update

Answer

Cloning a SIM card using RF eavesdropping equipment

Answer

Intercepting SMS messages via a rogue cell tower

Question 4

What is the security purpose of certificate pinning in mobile applications?

Accepted Answer

To ensure the app only trusts specific certificates, preventing MITM attacks via rogue CAs

Answer

To encrypt all data stored in the app's local database

Answer

To prevent the app from running on rooted or jailbroken devices

Answer

To bind the app license to a specific device's hardware ID

Question 5

What is 'smishing' in mobile security?

Accepted Answer

Phishing attacks delivered via SMS text messages

Answer

Sending malware via Bluetooth to nearby devices

Answer

Exploiting vulnerabilities in smartphone browsers

Answer

Installing spyware through malicious QR codes

Question 6

Starting with Android 6.0 (Marshmallow), how were app permissions changed to improve security?

Accepted Answer

Dangerous permissions must be requested and granted individually at runtime

Answer

All permissions were removed and replaced with a single app trust level

Answer

Permissions were granted at install time in bulk with no granular control

Answer

Permissions became device-wide rather than per-application

Question 7

What primary security risk does a BYOD (Bring Your Own Device) policy introduce in an enterprise environment?

Accepted Answer

Loss of organizational control over device security posture and data handling

Answer

Increased hardware procurement costs for the IT department

Answer

Mandatory compliance with consumer privacy laws for the employer

Answer

Reduced network bandwidth due to personal device usage