Technology Certifications Wireless & Mobile Security 2 — Questions and Answers
Question 1: Which Mobile Device Management (MDM) capability allows administrators to remotely delete all corporate and personal data from a lost or stolen device?
- Remote lock
- Remote wipe (Correct answer)
- Geofencing enforcement
- Application blacklisting
Correct answer: Remote wipe
Remote wipe erases all data on a device over the network, ensuring sensitive corporate information cannot be accessed if a device is lost or stolen.
Question 2: What is the primary security risk of jailbreaking an iOS device or rooting an Android device?
- Decreased battery performance
- Loss of warranty and support coverage
- Removal of OS-level security controls and application sandboxing (Correct answer)
- Slower wireless network speeds
Correct answer: Removal of OS-level security controls and application sandboxing
Jailbreaking and rooting remove operating system security restrictions and sandboxing, allowing malicious applications to access privileged system resources and other apps' data.
Question 3: What is the purpose of containerization in enterprise mobile device management (MDM) for BYOD environments?
- Increase device processing speed by isolating tasks
- Enable wireless encryption on personal devices
- Separate and secure corporate data from personal data on the same device (Correct answer)
- Block all third-party application installations
Correct answer: Separate and secure corporate data from personal data on the same device
Containerization creates an encrypted, isolated workspace for corporate apps and data on a personal device, keeping it separate from personal content and enabling selective wipe.
Question 4: Which Bluetooth attack involves sending unsolicited messages to discoverable Bluetooth-enabled devices without the owner's consent?
- Bluesnarfing
- Bluejacking (Correct answer)
- Bluebugging
- Evil twin
Correct answer: Bluejacking
Bluejacking sends unsolicited contact cards or messages to nearby Bluetooth devices using the OBEX protocol, exploiting the device discovery feature.
Question 5: Which mobile attack intercepts or redirects SMS-based two-factor authentication codes by convincing a carrier to reassign a victim's phone number?
- Bluejacking
- SIM swapping (Correct answer)
- Bluesnarfing
- Wardriving
Correct answer: SIM swapping
SIM swapping (SIM hijacking) involves social engineering a mobile carrier to transfer the victim's phone number to an attacker-controlled SIM, enabling interception of SMS-based 2FA.
Question 6: Which Bluetooth attack allows unauthorized access to files and data stored on a victim's Bluetooth-enabled device?
- Bluejacking
- Bluesnarfing (Correct answer)
- Bluesmacking
- Bluebugging
Correct answer: Bluesnarfing
Bluesnarfing exploits vulnerabilities in the Object Exchange (OBEX) protocol to unauthorized access and steal data such as contacts, messages, and calendar entries from a device.
Question 7: What must a BYOD (Bring Your Own Device) security policy primarily address to protect corporate assets?
- Employee reimbursement rates for device purchases
- Acceptable use, data ownership, and security requirements for personal devices accessing corporate resources (Correct answer)
- Specific device brand and model requirements
- Increasing employee productivity metrics
Correct answer: Acceptable use, data ownership, and security requirements for personal devices accessing corporate resources
A BYOD policy must define security baselines, acceptable use rules, data ownership and privacy terms, and incident response procedures to protect corporate data on personal devices.
