GMOB by GIAC Valid Free Exam Practice Test

Question 1

What role does Android's Intent system play in the app's security model?
Response:

A. It controls device power management B. It manages app backups C. It regulates battery usage D. It handles inter-app communication securely

Correct Answer: D

Question 2

In the context of mobile device security, what does flashing a custom ROM involve?
Response:

A. Upgrading the device's official firmware B. Installing a modified version of the operating system C. Temporarily disabling device security features D. Permanently altering the device's hardware

Correct Answer: B

Question 3

What is a common vulnerability often targeted in iOS app security?
Response:

A. Open Bluetooth connections B. Frequent location services checks C. Insecure data storage practices D. Overuse of push notifications

Correct Answer: C

Question 4

Which file is pivotal in defining app permissions and configuration settings in iOS applications?
Response:

A. app.properties B. Info.plist C. config.json D. settings.xml

Correct Answer: B

Question 5

What technique involves modifying the execution flow of an application while it is running to observe its behavior?
Response:

A. Code signing B. Resource optimization C. Runtime manipulation D. Asset bundling

Correct Answer: C

Question 6

Which tool is recommended for automated security testing of mobile apps according to MASVS?
Response:

A. GitLab CI B. OWASP ZAP C. Jenkins D. Drozer

Correct Answer: D

Question 7

Which of the following are key elements to examine when performing a security assessment of Android applications?
(Choose Three)
Response:

A. APK file permissions B. Android version compatibility C. Application sandboxing D. Use of third-party libraries

Correct Answer: A,C,D

Question 8

Which of the following permissions are often considered dangerous for a mobile application?
(Choose two)
Response:

A. INTERNET B. READ_CONTACTS C. ACCESS_FINE_LOCATION D. VIBRATE

Correct Answer: B,C

Question 9

What type of security policy is most effective in managing the risk of stolen devices in a corporate environment?
Response:

A. A relaxed data access policy to enhance employee satisfaction B. An open-door policy for easy device access C. A bring-your-own-device (BYOD) policy with strict security controls D. A policy allowing device sharing among employees

Correct Answer: C

Question 10

What is the significance of using SSL/TLS interception in network security testing?
Response:

A. To decrypt and inspect SSL/TLS encrypted traffic B. To streamline network traffic C. To validate the strength of encryption algorithms D. To increase the encryption level

Correct Answer: A

Question 11

Which technique is effective in detecting obfuscated or hidden malicious code in mobile applications?
Response:

A. Static code analysis B. Code linting C. Peer review D. Syntax highlighting

Correct Answer: A

Question 12

Which of these features should be enabled to help track and potentially recover a lost or stolen device that might contain sensitive data?
Response:

A. Mobile device encryption B. Remote wipe C. USB debugging D. Developer options

Correct Answer: B

Question 13

What are two common techniques to mitigate against mobile malware infections?
(Choose two)
Response:

A. Sideloading apps from third-party stores B. Regularly scanning devices with anti-malware software C. Disabling automatic updates for apps D. Installing apps only from trusted sources

Correct Answer: B,D

GIAC Mobile Device Security Analyst - GMOB Exam Practice Test