CMT Security & Data Protection Standards 5

Question 1

Which protocol is used to securely wipe an iOS device remotely when it cannot connect to the internet?

Accepted Answer

MDM wipe command queued for next connection

Answer

MDM wipe commands are queued on Apple's APNs infrastructure and delivered the next time the device connects to any network, ensuring eventual execution.

Question 2

A customer's Android device is showing signs of a rogue profile installed via a phishing link. What is the FIRST step a technician should take?

Accepted Answer

Navigate to device admin settings and revoke the rogue profile's permissions before removal

Answer

Rogue device admin profiles must first be deactivated in settings before they can be removed, as active admin profiles block their own deletion.

Question 3

What is the primary security benefit of using eSIM technology over a physical SIM card?

Accepted Answer

eSIMs cannot be physically removed or swapped, reducing SIM-swap attack risk

Answer

Because eSIMs are embedded and not removable, a thief cannot simply swap the SIM to bypass carrier blacklisting or access the mobile number.

Question 4

Under the California Consumer Privacy Act (CCPA), what right do consumers have regarding personal data collected by mobile apps?

Accepted Answer

The right to know what data is collected, opt out of its sale, and request deletion

Answer

CCPA grants California consumers the rights to access, delete, and opt out of the sale of their personal information collected by businesses.

Question 5

A technician is using a USB-C cable to transfer a customer's data during repair. Which attack vector should the technician be aware of if using an untrusted cable?

Accepted Answer

BadUSB attack where the cable contains embedded malicious firmware

Answer

BadUSB attacks embed malicious firmware in a cable or USB device that can execute commands, inject keystrokes, or install malware when plugged in.

(CMT) Certified Mobile Tech Practice Test

(CMT) Certified Mobile Tech Practice Test

CMT Security & Data Protection Standards 5