CASP+: Chapter 7A Analyze Enterprise Mobility Protections

Which of the following certificates is commonly used to implement access controls for mobile devices?

• User certificates

• Encryption certificates

• Trust (device) certificates

• Authentication certificates

Which standard is associated with the Simultaneous Authentication of Equals (SAE)?

• WPA3 (Wi-Fi 6)

• WPA2 (Wi-Fi 5)

• IEEE 802.11n

• IEEE 802.11ac

Which type of device attack allows complete control of a device without the target device being paired with the attacker?

• BlueBorne

• Man-in-the-Middle (MitM)

• Distributed Denial-of-Service (DDoS)

• Denial-of-Service (DoS)

What is a potential security threat posed by DNS over HTTPS (DoH) in an enterprise setting?

• DoH relies on untrusted providers for DNS resolution.

• DoH increases the efficiency of DNS resolution without impacting security.

• DoH can bypass external DNS query restrictions configured on firewalls.

• DoH encapsulates DNS traffic within HTTPS traffic, making it harder to identify.

How can Bluetooth be used for physical reconnaissance?

• Bluetooth facilitates the interception of encrypted communications between devices.

• Bluetooth allows attackers to remotely access devices and extract sensitive information.

• Bluetooth devices can be discovered using freely available tools, allowing attackers to locate out-of-sight devices.

• Bluetooth enables attackers to launch denial-of-service attacks on nearby devices.

Which technique is commonly used in iOS devices to gain root privileges and customize the device?

• Using official rooting tools provided by Apple

• Exploiting vulnerabilities in the bootloader

• Systemless root method

• Booting with a modified kernel

What is a potential security risk associated with sideloading apps on Android devices?

• Increased vulnerability to malware

• Improved customization options

• Enhanced app performance

• Better compatibility with third-party stores

How does containerization enhance mobile device security in an enterprise environment?

• By allowing unrestricted access to corporate apps

• By granting full control over device settings to users

• By removing the need for additional authentication

• By isolating corporate apps from personal apps and data

Which mobile device attack allows an attacker to gain control of a device without the need for physical or wireless proximity to the target?

• Bluejacking

• Drive-by download

• SIM swapping

• Zero-day exploit

How does rooting an Android device differ from jailbreaking an iOS device in terms of security implications?

• Jailbreaking requires physical access to the device, unlike rooting.

• Rooting increases the risk of malware infections compared to jailbreaking.

• Jailbreaking allows deeper access to system files compared to rooting.

• Rooting provides enhanced security features compared to jailbreaking.