CSCU - Certified Secure Computer User Mobile and IoT Device Security Questions and Answers

Question 1

A company wants to enforce a security policy that requires all employee-owned smartphones accessing corporate email to have a mandatory PIN and the ability to be remotely wiped if lost or stolen.
Which of the following solutions would BEST achieve this?

Accepted Answer

Mobile Device Management (MDM)

Answer

A corporate VPN

Answer

Two-factor authentication (2FA)

Answer

A network firewall

Question 2

What is a primary security consequence of jailbreaking an iOS device or rooting an Android device?

Accepted Answer

It bypasses the operating system's built-in security controls and sandboxing.

Answer

It improves the device's battery life.

Answer

It automatically encrypts all user data.

Answer

It disables the device's ability to connect to Wi-Fi.

Question 3

A user has several IoT devices, such as smart light bulbs and a smart thermostat, on their home network. To minimize the potential damage if one of these devices is compromised, which of the following is the BEST network security practice?

Accepted Answer

Placing all IoT devices on a separate, isolated network segment.

Answer

Connecting all IoT devices using Ethernet cables instead of Wi-Fi.

Answer

Assigning static IP addresses to each IoT device.

Answer

Disabling the firewall on the main router to improve device communication.

Question 4

A user receives an SMS text message that warns their bank account has been locked and provides a link to 'verify' their identity. This is a classic example of which type of attack?

Accepted Answer

Smishing

Answer

Vishing

Answer

Bluejacking

Answer

Spear Phishing

Question 5

An individual in a crowded public area suddenly receives an unsolicited, anonymous business card contact on their phone via Bluetooth. The contact contains a simple advertising message. What is this activity called?

Accepted Answer

Bluejacking

Answer

Bluesnarfing

Answer

Smishing

Answer

Vishing

Question 6

Upon setting up a new smart security camera, a user connects it to their network without changing the default username and password printed on the device's label. What is the MOST significant security risk of this action?

Accepted Answer

The manufacturer's default credentials are often publicly known and can be easily exploited by attackers.

Answer

The device may consume too much network bandwidth.

Answer

The camera's video resolution might be permanently lowered.

Answer

The device will not be able to receive future firmware updates.

A company wants to enforce a security policy that requires all employee-owned smartphones accessing corporate email to have a mandatory PIN and the ability to be remotely wiped if lost or stolen.Which of the following solutions would BEST achieve this?

A company wants to enforce a security policy that requires all employee-owned smartphones accessing corporate email to have a mandatory PIN and the ability to be remotely wiped if lost or stolen.
Which of the following solutions would BEST achieve this?