Worksheets22CA2015 - Mobile Hacking - Surprise Quiz 1
Total questions: 65
Worksheet time: 49mins
Name
Class
Date
1.
Identify the primary goal of a mobile risk model.
a)
Assess and manage risks
b)
Enhance device aesthetics
c)
Improve battery life
d)
Design user interfaces
2.
Define the term "mobile risk".
a)
Risks arising from mobile device vulnerabilities
b)
Risks related to desktop software
c)
Risks from physical theft of devices only
d)
Risks specific to network hardware
3.
Select the layer where application vulnerabilities are primarily assessed in a mobile risk model.
a)
Application
b)
Hardware
c)
Network
d)
Operating system
4.
Explain why a mobile risk model includes threat analysis.
a)
To identify potential vulnerabilities and their impacts
b)
To predict future trends in mobile hardware
c)
To improve software download speed
d)
To eliminate all risks from mobile devices
5.
Classify the following risks into categories in a mobile risk model: malware, weak encryption, and unsecured Wi-Fi.
a)
Application, Network, Device
b)
Hardware, Software, Network
c)
Network, Encryption, Device
d)
Application, Encryption, Software
6.
Summarize the role of mobile device management (MDM) in mitigating risks.
a)
MDM controls access, monitors devices, and ensures compliance.
b)
MDM helps manage mobile networks efficiently.
c)
MDM encrypts user data during software downloads.
d)
MDM restricts internet access on mobile devices.
7.
Demonstrate how encryption mitigates data breaches in mobile devices.
a)
By preventing unauthorized access to unencrypted data
b)
By ensuring faster device performance
c)
By creating multiple user profiles
d)
By enabling app installations securely
8.
Use a risk model to determine which of the following is most critical for securing a banking app.
a)
Strong passwords
b)
Irregular updates
c)
No authentication
d)
Rooting
9.
Apply the concept of network segmentation in mobile risk models. What is its main purpose?
a)
To separate sensitive traffic from general traffic
b)
To boost internet speed for mobile users
c)
To reduce device maintenance costs
d)
To improve app installation processes
10.
Analyze the impact of weak session management in mobile apps.
a)
It can expose user sessions to hijacking attacks.
b)
It can lead to faster logins.
c)
It improves app responsiveness.
d)
It ensures secure communication between users.
11.
Differentiate between risks posed by jailbroken devices and unencrypted data.
a)
Jailbroken devices allow unauthorized changes, while unencrypted data is vulnerable to interception.
b)
Jailbroken devices are immune to malware, while unencrypted data is not.
c)
Unencrypted data affects only device performance, while jailbroken devices do not.
d)
Jailbroken devices affect app quality, while unencrypted data doesn’t.
12.
Examine how poor app permissions contribute to security risks in a mobile risk model.
a)
They provide unauthorized access to sensitive device resources.
b)
They disable critical security updates.
c)
They increase battery consumption.
d)
They enhance app performance in secure environments.
13.
Organize the following risk mitigation strategies in a mobile risk model: encryption, firewalls, user training, and biometric authentication.
a)
Device, Network, Human, Application
b)
Application, Network, Device, Human
c)
Network, Device, Application, Human
d)
Human, Application, Device, Network
14.
Interpret the role of continuous monitoring in mobile risk models.
a)
Detecting vulnerabilities in real time and ensuring timely responses
b)
Increasing device battery life
c)
Enhancing user experience through app recommendations
d)
Automating app installations
15.
Evaluate the effectiveness of biometric authentication compared to traditional passwords in reducing mobile security risks.
a)
Biometrics are harder to replicate and more secure.
b)
Biometrics are equally secure but more convenient.
c)
Passwords are more secure but less convenient.
d)
Both are equally vulnerable.
16.
Identify the primary purpose of a mobile risk model for native code.
a)
Mitigate security vulnerabilities
b)
Improve app monetization
c)
Optimize app performance
17.
Select the key component that a mobile risk model focuses on for native code.
a)
Code-level vulnerabilities
b)
Network configuration
c)
User feedback
d)
Advertising integration
18.
Recognize which of the following is a common risk in native mobile code.
a)
Malware injection
b)
Inaccurate GPS tracking
c)
Slow app load time
d)
Poor color contrast
19.
Explain why native code introduces higher risks in mobile applications.
a)
It directly interacts with the device's hardware and OS.
b)
It is harder to compile.
c)
It requires more memory to run.
d)
It is developed using cross-platform tools.
20.
Summarize the main threat posed by insecure native code in mobile apps.
a)
Exposure of sensitive data
b)
Loss of app revenue
c)
Reduced user engagement
d)
Increased file sizes
21.
Apply a mobile risk model to assess a native code vulnerability. What should be analyzed first?
a)
The app's permissions and API calls
b)
The app's user interface
c)
The number of downloads
d)
The app's customer reviews
22.
Implement a security strategy to protect native code from reverse engineering. Which of the following is most effective?
a)
Implement code obfuscation techniques
b)
Use smaller APK files
c)
Increase app download size
d)
Avoid native code entirely
23.
Identify a real-world scenario where native code risks can lead to financial loss.
a)
A banking app exposing customer credentials due to poor encryption
b)
A gaming app with low in-app purchases
c)
A news app with outdated content
d)
A weather app with inaccurate data
24.
Analyze the potential impact of poor native code security on mobile devices.
a)
Device-level compromise through privilege escalation
b)
Increased app revenue
c)
Enhanced app performance
d)
Faster app updates
25.
Differentiate between static and dynamic analysis in identifying risks in native code.
a)
Static analysis examines code without executing it, while dynamic analysis tests runtime behavior.
b)
Static analysis detects runtime issues, while dynamic analysis reviews syntax.
c)
Static analysis improves performance, while dynamic analysis reduces memory usage.
d)
Static analysis and dynamic analysis are identical.
26.
Evaluate the effectiveness of code obfuscation as a countermeasure against native code threats.
a)
It delays attackers but doesn't eliminate risks entirely.
b)
It fully eliminates risks.
c)
It has no impact on security risks.
d)
It is only applicable to hybrid apps.
27.
Critique the role of third-party libraries in increasing risks in native code.
a)
They can introduce vulnerabilities if not properly vetted.
b)
They always enhance app security.
c)
They have no impact on security risks.
d)
They reduce the need for secure coding practices.
28.
Recommend the most effective way to address risks in native code.
a)
Regularly update libraries and implement secure coding practices.
b)
Ignore low-severity vulnerabilities.
c)
Avoid using native code altogether.
d)
Rely solely on third-party tools for risk management.
29.
Identify which of the following is a physical risk related to mobile devices.
a)
Device theft
b)
Malware attacks
c)
Unauthorized app installation
d)
Phishing emails
30.
Select the most common physical risk that mobile users face.
a)
Loss of the device
b)
Data interception
c)
Rogue Wi-Fi networks
d)
OS vulnerabilities
31.
Explain why physical security is critical for mobile devices.
a)
To protect sensitive data stored on the device
b)
To ensure uninterrupted internet access
c)
To improve battery life
d)
To prevent unauthorized app downloads
32.
Classify the following scenario: Leaving your mobile phone unattended in a public place.
a)
Physical security risk
b)
Cybersecurity risk
c)
Environmental risk
d)
Network risk
33.
Demonstrate an effective way to prevent physical theft of mobile devices.
a)
Use a secure locking mechanism, such as biometrics
b)
Enable airplane mode
c)
Install an antivirus application
d)
Use strong passwords for accounts
34.
Analyze how a mobile device's portability increases its physical risks.
a)
It becomes easier to lose or steal.
b)
It enhances connectivity and usability.
c)
It makes the device heavier to carry.
d)
It limits access to physical security tools.
35.
Differentiate between physical risks and digital risks for mobile devices.
a)
Physical risks affect hardware, while digital risks target software and data.
b)
Physical risks are less severe than digital risks.
c)
Physical risks are caused by malware, while digital risks involve theft.
d)
Both are unrelated to mobile device security.
36.
Propose a solution to mitigate physical risks for enterprise mobile devices.
a)
Implement employee training and device tracking systems.
b)
Only allow usage of specific mobile apps.
c)
Require employees to use a shared mobile device.
d)
Ban mobile devices from being used outside the office.
37.
Design a physical risk mitigation strategy for mobile devices in high-risk environments.
a)
Use device locks, encryption, and secure storage practices.
b)
Disable GPS tracking on all devices.
c)
Only use devices without sensitive data.
d)
Install multiple social media apps for remote access.
38.
Evaluate the effectiveness of tracking software in reducing physical risks.
a)
Minimizes the impact of theft and loss
b)
Completely eliminates physical risks
c)
Has no significant impact on physical security
d)
Increases physical risk due to overreliance on software
39.
Assess the risk of leaving a mobile device unattended in a workplace.
a)
High risk due to sensitive information exposure
b)
Low risk because workplaces are always secure
c)
Moderate risk depending on the workplace policies
d)
No risk because devices are password protected
40.
Define the term "physical risk" in the context of mobile devices.
a)
The risk of losing or damaging a mobile device physically
b)
The risk of encountering malicious apps
c)
The risk of unauthorized data transfer
d)
The risk of hacking via Bluetooth
41.
Predict the consequences of ignoring physical risks for mobile devices in an organization.
a)
Greater likelihood of data loss or theft
b)
Increased productivity
c)
Reduced chance of data breaches
d)
No significant consequences
42.
Identify which of the following is a common service risk in mobile risk models:
a)
Data leakage
b)
Poor signal strength
c)
High internet speed
d)
Increased battery life
43.
Recall which term is associated with unauthorized access to mobile services:
a)
Service hijacking
b)
Service restoration
c)
Data encryption
d)
Multi-factor authentication
44.
Name the layer of the mobile architecture most vulnerable to service risks:
a)
Application layer
b)
Transport layer
c)
Data link layer
d)
Physical layer
45.
Explain why weak authentication mechanisms lead to service risks:
a)
They allow attackers to bypass security protocols.
b)
They increase the cost of service delivery.
c)
They improve user experience at the expense of security.
d)
They enhance encryption standards.
46.
Classify the following into intentional and unintentional service risks: phishing, accidental data deletion, malware injection, misconfigured APIs.
a)
Intentional: phishing, malware injection; Unintentional: accidental data deletion, misconfigured APIs
b)
Intentional: phishing, accidental data deletion
c)
Intentional: malware injection, accidental data deletion
d)
Intentional: misconfigured APIs; Unintentional: phishing, accidental data deletion
47.
Summarize the role of service-level agreements (SLAs) in mitigating service risks:
a)
They provide guidelines to manage and reduce risks.
b)
They eliminate all service risks.
c)
They replace the need for security controls.
d)
They ensure user data is shared openly for transparency.
48.
Apply encryption techniques to minimize the risk of data interception during service usage:
a)
Implement secure socket layer (SSL) encryption.
b)
Use plaintext communication.
c)
Disable secure channels.
d)
Share encryption keys openly.
49.
Demonstrate how to detect unauthorized access to mobile services:
a)
By monitoring unusual login activity.
b)
By disabling all logs.
c)
By avoiding user authentication processes.
d)
By relying solely on user feedback.
50.
Use vulnerability assessment tools to analyze risks in mobile services. Which tool is most appropriate?
a)
Wireshark
b)
Microsoft Word
c)
Adobe Photoshop
d)
YouTube
51.
Differentiate between data interception and data manipulation in mobile services:
a)
Interception occurs during transit, while manipulation changes data content.
b)
Interception involves modifying data, while manipulation involves stealing it.
c)
Interception and manipulation are identical.
d)
Both only occur on physical servers.
52.
Analyze how insecure APIs contribute to service risks:
a)
They expose sensitive data to unauthorized users.
b)
They restrict access to legitimate users.
c)
They increase system performance.
d)
They improve service availability.
53.
Examine the impact of poor patch management on service risks:
a)
It increases vulnerability to exploits.
b)
It ensures timely updates are implemented.
c)
It improves compatibility with older systems.
d)
It reduces the risk of service downtime.
54.
Evaluate the effectiveness of multi-factor authentication (MFA) in mitigating service risks:
a)
It significantly reduces unauthorized access risks.
b)
It replaces the need for passwords.
c)
It completely eliminates all service risks.
d)
It weakens service usability.
55.
Assess the impact of poor user training on service risks:
a)
It increases the likelihood of phishing and other social engineering attacks.
b)
It helps mitigate insider threats.
c)
It creates an informed user base for secure service use.
d)
It reduces security incidents by promoting awareness.
56.
Judge whether the implementation of real-time monitoring is sufficient to address all service risks in a mobile risk model:
a)
No, it is only a part of a comprehensive risk management strategy.
b)
Yes, it eliminates the need for other controls.
c)
Yes, it automates all security processes.
d)
No, it increases service downtime and delays.
57.
Define the term "mobile application risk model".
a)
A framework for evaluating potential vulnerabilities in mobile applications
b)
A process for identifying and managing risks in desktop applications
c)
A system for optimizing mobile app performance
d)
A guideline for mobile app monetization
58.
Identify the most common threat to mobile applications.
a)
Insecure data storage
b)
Data encryption
c)
Optimized API usage
d)
High-resolution graphics
59.
List a primary goal of mobile application risk models.
a)
Detect and mitigate vulnerabilities
b)
Reduce user engagement
c)
Minimize development costs
d)
Enhance app graphics
60.
Explain why insecure communication is considered a risk in mobile applications.
a)
It allows unauthorized access to sensitive data during transmission.
b)
It slows down the app's performance.
c)
It improves user experience.
d)
It affects app design.
61.
Classify the risk involved when an app does not enforce strong authentication mechanisms.
a)
Application risk
b)
Network risk
c)
Physical risks
d)
User interface risk
62.
Evaluate the impact of failing to implement secure session management in mobile applications.
a)
Potential session hijacking attacks
b)
Increased user engagement
c)
Improved app performance
d)
Reduced app development costs
63.
Critique the use of weak encryption algorithms in sensitive mobile applications.
a)
They leave sensitive data exposed to attackers.
b)
They reduce app complexity.
c)
They simplify security compliance.
d)
They enhance encryption strength.
64.
Recommend an appropriate strategy to mitigate application risks in mobile app development.
a)
Regular security testing and patching
b)
Ignoring OWASP guidelines
c)
Minimizing user permissions
d)
Reducing app features
65.
Examine the effect of insecure third-party libraries in mobile applications.
a)
They introduce vulnerabilities that attackers can exploit.
b)
They slow down the app's performance.
c)
They ensure better app compatibility.
d)
They help reduce app size.
100 %
