Mobile App Design Regulatory Frameworks & Compliance 3

Question 1

Which accessibility standard do both Apple and Google recommend as the baseline for mobile app accessibility compliance in the US?

Accepted Answer

WCAG 2.1 Level AA

Answer

WCAG 2.1 Level AA is the globally accepted baseline that both Apple's Human Interface Guidelines and Google's Material Design reference for accessibility.

Question 2

A banking app stores session tokens in Android's SharedPreferences without encryption. This most directly violates:

Accepted Answer

OWASP Mobile Top 10 — M2: Insecure Data Storage

Answer

OWASP Mobile Top 10 M2 specifically addresses insecure data storage, and SharedPreferences is not encrypted by default.

Question 3

Under the EU's Digital Services Act (DSA), very large online platforms must provide users the ability to:

Accepted Answer

Opt out of recommender systems based on profiling

Answer

DSA Article 38 requires very large platforms to offer at least one recommender system option not based on profiling.

Question 4

An iOS app collects the device's advertising identifier (IDFA). Since iOS 14.5, what must the app do before accessing IDFA?

Accepted Answer

Display an App Tracking Transparency (ATT) prompt and receive user permission

Answer

Apple's ATT framework (iOS 14.5+) requires apps to request permission via NSUserTrackingUsageDescription before accessing IDFA.

Question 5

Which regulation mandates that mobile apps available to US federal employees must meet specific security and configuration requirements?

Accepted Answer

FISMA combined with NIST SP 800-163

Answer

FISMA and NIST SP 800-163 together govern mobile app vetting and security requirements for federal government use.

Mobile App Design Practice Test

Mobile App Design Practice Test

Mobile App Design Regulatory Frameworks & Compliance 3