CSCU Mobile and IoT Device Security 2

Question 1

What is the primary security risk of sideloading apps on a mobile device?

Accepted Answer

Sideloaded apps bypass official app store security reviews and may contain malware

Answer

Sideloading installs apps from sources outside official app stores, bypassing the security vetting process that screens for malware, excessive permissions, and other security issues.

Question 2

What security vulnerability is associated with default credentials on IoT devices?

Accepted Answer

Attackers can easily access devices using widely known factory-default usernames and passwords

Answer

Many IoT devices ship with common default credentials (like admin/admin) that are publicly documented and easily exploited if users do not change them during setup.

Question 3

Why is remote wipe capability important for mobile device security?

Accepted Answer

It allows all data on a lost or stolen device to be erased remotely to prevent unauthorized access

Answer

Remote wipe allows you to erase all data on a lost or stolen mobile device from another device or computer, preventing thieves from accessing personal information, accounts, and sensitive data.

Question 4

What is a man-in-the-middle attack on a mobile device?

Accepted Answer

An attacker intercepting communications between the mobile device and a server by positioning themselves in the network path

Answer

In a mobile MITM attack, an attacker intercepts the communication between a device and a network service—often through rogue Wi-Fi access points—to steal data or inject malicious content.

Question 5

What security risk does Bluetooth pose when left enabled and discoverable on a mobile device?

Accepted Answer

Attackers can exploit Bluetooth vulnerabilities to access data, eavesdrop on communications, or gain control of the device

Answer

Leaving Bluetooth enabled and discoverable exposes the device to attacks like Bluejacking, Bluesnarfing, and BlueBorne that can steal data, install malware, or take control of the device.

CSCU - Certified Secure Computer User Practice Test

CSCU - Certified Secure Computer User Practice Test

CSCU Mobile and IoT Device Security 2