NEW
Font size
WorksheetsSecurity+ Cengage Module6: Mobile and Embedded Device Security
Total questions: 20
Worksheet time: 11mins
Ahmet is explaining to his team members the security constraints that have made it a challenge to protect a new embedded system. Which of the following would Akira NOT include as a constraint?
Authentication
Cost
Power
Ease of use
Yusuf has been asked to experiment with different hardware to create a controller for a new device on the factory floor. He needs a credit-card sized motherboard that has a microcontroller instead of a microprocessor. Which would be the best solution?
SoC
Raspberry Pi
Arduino
FPGA
Musa needs a tool with a single management interface that provides capabilities for managing and securing mobile devices, applications, and content. Which tool would be the best solution?
UEM
MDM
MCCM
MMAM
In a job interview, Deniz asks about the company policy regarding smartphones. He is told that employees may choose from a limited list of approved devices but that he must pay for the device herself; however, the company will provide her with a monthly stipend. Which type of enterprise deployment model does this company support?
BYOD
DYOD
CYOD
Corporate-owned
Eren has been asked to provide information regarding adding a new class of Android smartphones to a list of approved devices. One of the considerations is how frequently the smartphones receive firmware OTA updates. Which of the following reasons would Eren NOT list in their report as a factor in the frequency of Android firmware OTA updates?
OEMs are hesitant to distribute Google updates because it limits their ability to differentiate themselves from competitors if all versions of Android start to look the same through updates
Because many of the OEMs have modified Android, they are reluctant to distribute updates that could potentially conflict with their changes
Wireless carriers are reluctant to provide firmware OTA updates because of the bandwidth it consumes on their wireless networks
Because OEMs want to sell as many devices as possible, they have no financial incentive to update mobile devices that users would then continue to use indefinitely
What is the process of identifying the geographical location of a mobile device?
Geotracking
Geolocation
GeoID
Geomonitoring
Which of the following is NOT an advantage of COPE for an enterprise?
Simplified IT infrastructure
Cost savings
Flexibility in management
More oversight
Ceyhun received a request by a technician for a new portable computer. The technician noted that they wanted USB OTG support and asked Ceyhun’s advice regarding it. Which of the following would Ceyhun NOT tell them is an advantage?
A device connected via USB OTG can function as a peripheral for external media access.
A device connected via USB OTG can function as a host.
USB OTG is only available for connecting Android devices to a portable computer
Connecting a mobile device to an infected computer using USB OTG could allow malware to be sent to that device
Ozan has received a phone call from his supervisor that a new employee has attempted to download and install an unapproved app that allows her to circumvent the built-in limitations on her Android smartphone. What is this called?
Rooting
Sideloading
Jailbreaking
Ducking
What is another name for run-time verification?
Static code analysis
Dynamic code analysis
Fuzzering
Weighted code analysis
What is dead code?
A block of code that does not run
Code that has been tagged to be removed from an application.
A branch in a code that calls in a subroutine but always returns a null value.
A section of an application that executes but performs no meaningful function.
Cahill is writing an application using SecDevOps and wants to prevent XSS and CSRF attacks. What coding technique would he use?
Obfuscation
Code signing
Input validation
Normalization
What does containerization do?
It splits operating system functions only on specific brands of mobile devices.
It places all keys in a special vault.
It slows down a mobile device to half speed.
It separates personal data from corporate data.
What allows a device to be managed remotely?
MDM
MAM
MRM
MWM
Which of these is NOT a security feature for locating a lost or stolen mobile device?
Remote lockout
Last known good configuration
Alarm
Thief picture
What enforces the location in which an app can function by tracking the location of the mobile device?
Location resource management
Geofencing
GPS tagging
Graphical Management Tracking (GMT)
Which of these is considered the strongest type of passcode to use on a mobile device?
Password
PIN
Fingerprint swipe
Draw connecting dots pattern
Which of the following is NOT a means by which untrusted content can be sent to a mobile device?
SMS
MMS
RCS
XRX
Which tool manages the distribution and control of apps?
MAM
MDM
MCM
MFM
Which type of OS is typically found on an embedded system?
SoC
RTOS
OTG
COPE
