Practice Test Geeks(CMT) Certified Mobile Tech Practice Test
← All CMT Flashcard Decks

Security & Data Protection Standards Flashcards

7 cards from real CMT practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Security & Data Protection Standards flashcards as text

  1. A technician is asked to image a customer's device before repair. Where is the SAFEST place to store a temporary device image?

    Answer: On an encrypted, password-protected local drive dedicated to customer data

    Encrypted, access-controlled dedicated storage ensures customer data is protected from unauthorized access during the repair window.

  2. What is the significance of an app requesting 'overlay' permissions on Android?

    Answer: It can draw over other apps, potentially enabling UI spoofing or tapjacking attacks

    Overlay permissions let an app draw transparent layers over other apps' UIs, which malicious apps exploit to intercept taps and credential entry (tapjacking).

  3. A customer's iPhone is in Lost Mode. Which of the following accurately describes what a technician can and cannot do?

    Answer: The device displays a custom message and is locked; the technician cannot access data without owner credentials

    Lost Mode locks the device, displays a custom message, and prevents data access; Activation Lock requires the original Apple ID to restore the device.

  4. Which security standard specifically governs the protection of payment card data on point-of-sale and mobile payment systems?

    Answer: PCI DSS

    PCI DSS (Payment Card Industry Data Security Standard) sets requirements for any system that stores, processes, or transmits cardholder data.

  5. What is 'shoulder surfing' in the context of mobile device security?

    Answer: Physically observing a user's screen or keypad to steal PINs or passwords

    Shoulder surfing is a low-tech social engineering technique where an attacker observes a victim's device screen to steal credentials or sensitive information.

  6. Which of the following BEST prevents unauthorized SIM swapping that could compromise mobile account security?

    Answer: Enabling carrier account PINs and SIM lock features

    A carrier account PIN adds authentication before any SIM changes can be made, blocking attackers from porting a victim's number to their own SIM.

  7. A repair technician replaces a battery and notices the device's IMEI sticker is removed. Why is this a significant concern?

    Answer: The device may be stolen, as IMEI removal is a common tactic to obscure device identity

    IMEI numbers uniquely identify mobile devices and their removal is commonly associated with stolen devices whose owners have blacklisted the IMEI.