Mobile and IoT Device Security Flashcards

What is Mobile Device Management (MDM) and what is its primary purpose?

Answer: A solution that allows organizations to remotely manage, monitor, and secure employee mobile devices

MDM solutions enable organizations to enforce security policies, manage applications, and remotely monitor and control mobile devices used for work purposes.

What security risk is associated with outdated firmware on IoT devices?

Answer: Unpatched vulnerabilities in old firmware can be exploited by attackers to compromise the device and potentially the entire network

IoT devices running outdated firmware contain known, unpatched vulnerabilities that attackers can exploit to gain unauthorized access, compromising both the device and the broader network.

What is jailbreaking or rooting a mobile device and why does it increase security risk?

Answer: Removing built-in security restrictions to gain full system access, which also removes protections against malware and unauthorized access

Jailbreaking (iOS) or rooting (Android) removes manufacturer-imposed security restrictions, allowing more customization but also eliminating critical security safeguards that protect against malware and unauthorized access.

What is an IoT botnet and how are such botnets typically formed?

Answer: A network of compromised IoT devices controlled by an attacker, typically formed by exploiting default credentials and unpatched vulnerabilities

IoT botnets consist of large numbers of compromised IoT devices (cameras, routers, smart appliances) that have been infected with malware and can be centrally controlled to launch attacks like DDoS.

What is the security benefit of network segmentation for IoT devices?

Answer: It isolates IoT devices on a separate network segment, limiting an attacker's ability to reach critical systems if an IoT device is compromised

Network segmentation places IoT devices on a separate network, so if an IoT device is compromised, the attacker cannot easily access computers, servers, and sensitive data on the main network.

Why is it important to disable unnecessary features and services on mobile devices?

Answer: Each enabled feature is a potential attack vector that increases the device's attack surface

Every enabled feature, service, or connectivity option (Wi-Fi, Bluetooth, NFC, location services) represents a potential attack vector. Disabling unused features reduces the device's attack surface.