ALISON Wireless & Mobile Security 2

Question 1

What does MDM stand for in the context of enterprise mobile security?

Accepted Answer

Mobile Device Management

Answer

MDM (Mobile Device Management) is a solution that allows organizations to remotely manage, monitor, and enforce security policies on employee mobile devices.

Question 2

What is 'jailbreaking' a mobile device?

Accepted Answer

Exploiting OS vulnerabilities to remove manufacturer/carrier restrictions and gain root access

Answer

Jailbreaking (iOS) or rooting (Android) involves exploiting OS vulnerabilities to gain privileged root access, bypassing built-in security controls and vetting mechanisms.

Question 3

What is a SIM swapping attack?

Accepted Answer

Socially engineering a carrier into transferring a victim's phone number to an attacker-controlled SIM

Answer

SIM swapping involves deceiving a mobile carrier's support staff into reassigning a victim's phone number to the attacker's SIM, enabling bypass of SMS-based MFA.

Question 4

What is the security purpose of certificate pinning in mobile applications?

Accepted Answer

To ensure the app only trusts specific certificates, preventing MITM attacks via rogue CAs

Answer

Certificate pinning embeds expected certificate fingerprints in the app so it rejects connections that present different certificates, even if signed by a trusted CA, thwarting MITM interception.

Question 5

What is 'smishing' in mobile security?

Accepted Answer

Phishing attacks delivered via SMS text messages

Answer

Smishing (SMS phishing) involves sending deceptive text messages that trick recipients into clicking malicious links or providing sensitive information.

ALISON - Advance Learning Interactive Systems Online Practice Test

ALISON - Advance Learning Interactive Systems Online Practice Test

ALISON Wireless & Mobile Security 2