CVA Wireless & Mobile Security Assessment Flashcards

What is the OWASP Mobile Security Testing Guide (MSTG) primarily used for during a mobile application vulnerability assessment?

Answer: Providing a comprehensive test case framework for mobile application security covering iOS and Android platforms

The OWASP MSTG provides detailed test cases and procedures for assessing mobile application security across authentication, data storage, network communication, and platform interaction.

During an iOS application assessment, what does testing for 'jailbreak detection bypass' accomplish?

Answer: Determine if the application's jailbreak detection can be bypassed to run the app in an unprotected environment for deeper testing

Bypassing jailbreak detection (e.g., using Frida or Liberty Lite) allows assessors to run the application on a jailbroken device for dynamic analysis, runtime manipulation, and deeper security testing.

Which attack against wireless networks involves sending continuous deauthentication frames to prevent legitimate clients from maintaining connectivity?

Answer: Wireless denial of service (DoS) via deauthentication flooding

Wireless DoS via deauthentication flooding exploits 802.11's unauthenticated management frames to continuously disconnect clients, preventing legitimate wireless connectivity.

In mobile application testing, what is 'dynamic analysis using Frida' used for?

Answer: Runtime instrumentation of a running mobile application to hook functions, inspect memory, bypass controls, and trace application behavior

Frida is a dynamic instrumentation toolkit that allows assessors to inject JavaScript into running processes, hook function calls, inspect memory, and bypass runtime security controls in mobile apps.

What is 'man-in-the-middle (MitM)' attack testing in the context of mobile application assessments?

Answer: Intercepting and potentially modifying traffic between a mobile application and its backend API by positioning a proxy between them

MitM testing positions an intercepting proxy (e.g., Burp Suite) between the mobile app and backend, capturing and analyzing API traffic to identify authentication weaknesses, insecure endpoints, and data exposure.

During a wireless assessment, which finding would be considered MOST critical and require immediate remediation?

Answer: Discovery of an open (unencrypted) access point connected to the corporate network without network segmentation

An open, unencrypted access point connected directly to the corporate network without segmentation allows any nearby device to connect and access internal systems without any authentication or encryption.