Android Development Android Security 2

Question 1

What is SQL injection and how does Room protect against it?

Accepted Answer

Room uses parameterized queries with placeholders that prevent user input from being interpreted as SQL

Answer

Room's @Query annotation uses parameterized queries where user input is bound as data, not parsed as SQL, preventing injection attacks.

Question 2

What is the purpose of the android:exported attribute in AndroidManifest.xml?

Accepted Answer

To control whether other apps can access the component

Answer

android:exported=false prevents other apps from starting or interacting with your Activity, Service, or BroadcastReceiver.

Question 3

Which HTTPS security feature verifies the server's identity using a predefined certificate fingerprint?

Accepted Answer

Certificate Pinning

Answer

Certificate pinning embeds the expected server certificate or public key hash in the app, rejecting connections with certificates that don't match.

Question 4

What does the FLAG_SECURE window flag do in Android?

Accepted Answer

Prevents the screen content from appearing in screenshots and screen recordings

Answer

FLAG_SECURE marks an Activity's window as secure, preventing its content from appearing in screenshots, recent apps thumbnails, and screen recordings.

Question 5

Which Android feature prevents apps from running unsigned or tampered code?

Accepted Answer

APK Signature Verification

Answer

APK Signature Verification ensures that apps are signed with a trusted key and have not been tampered with since signing.

Android Development Practice Test

Android Development Practice Test

Android Development Android Security 2