CMT Security & Data Protection Standards 3

Question 1

Which type of attack involves an attacker intercepting communication between a mobile device and a Wi-Fi access point without either party knowing?

Accepted Answer

Man-in-the-middle (MitM) attack

Answer

A man-in-the-middle attack intercepts and potentially alters communications between two parties who believe they are communicating directly.

Question 2

A customer reports their device was stolen. They want to prevent the thief from reselling it. Which feature specifically ties a device to an account and blocks activation on a new account?

Accepted Answer

Activation Lock (Find My / FRP)

Answer

Activation Lock on iOS and Factory Reset Protection (FRP) on Android prevent a device from being set up under a new account without the original owner's credentials.

Question 3

What is the purpose of certificate pinning in a mobile application?

Accepted Answer

To prevent MitM attacks by validating the server's specific certificate

Answer

Certificate pinning ensures the app only trusts a specific known certificate, preventing attackers from using a rogue but technically valid certificate to intercept traffic.

Question 4

Which of the following BEST describes 'jailbreaking' a mobile device from a security standpoint?

Accepted Answer

Bypassing OS security restrictions to allow unauthorized code execution

Answer

Jailbreaking removes OS-level security sandboxing, exposing the device to malware and unauthorized access that the stock OS would normally block.

Question 5

A shop receives a device for liquid damage repair that contains sensitive health data. Under HIPAA, what obligation does the repair shop have?

Accepted Answer

The shop must sign a Business Associate Agreement (BAA) and handle data appropriately

Answer

Repair shops that handle devices containing protected health information (PHI) may qualify as business associates and must execute a BAA and follow HIPAA safeguards.

(CMT) Certified Mobile Tech Practice Test

(CMT) Certified Mobile Tech Practice Test

CMT Security & Data Protection Standards 3