3.5 - Mobile Security

Question 1

What is a point-to-point connection?

Answer 1

A one-to-one connection. Typically, this is connection between buildings. Wi-Fi repeaters are an example.

It is a conversation between two devices.

Question 2

What is a point-to-multipoint?

Answer 2

The access point connects to multiple devices. This is the most common form under the 802.11.

Question 3

What are some security concerns with cellular networks?

Answer 3

1) Traffic Monitoring
2) Location Tracking
3) Worldwide access to a mobile device

Question 4

What are some security concerns with Wi-Fi networks?

Answer 4

1) Data capture
2) On-path attack
3) DOS (frequency interference)

Question 5

What are several types of mobile networks?

Answer 5

1) Bluetooth
2) Cellular
3) RFID (Radio-Frequency Identification)
4) Wi-Fi
5) NFC (Near Field Communication)
6) IR (Infrared)
7) USB
8) GPS

Question 6

How does RFID work?

Answer 6

Radar

Question 7

What are the security concerns with NFC?

Answer 7

1) Remote Capture
2) Frequency jamming
3) Relay / Replay attack
4) Loss of RFC device control

Question 8

What is a large security concern with IR (infrared)?

Answer 8

Other IR devices can control your IR device.

Question 9

What is MCM?

Answer 9

Mobile Content Management

Used to secure access to data and to protect data from outsiders on mobile devices.

Question 10

What is DLP?

Answer 10

Data Loss Prevention

To prevent the loss of sensitive data.

Question 11

How can you delete everything on a mobile device?

Answer 11

Remote Wipe in MDM.

Question 12

What is MDM?

Answer 12

Mobile Device Management

Allows you to manage company-owned and user-owned mobile devices

Question 13

What is Geofencing?

Answer 13

Restricting or allowing features when the device is in a particular area.

For authentication, you can allow only logins from a certain location or country.

Question 14

What can you manage with MDM?

Answer 14

1) Geofencing
2) Geolocation
3) Screen lock (how many attempts?)
4) Remote Wipe
5) Push notification services
6) Passwords and Pins
7) Biometrics (can be per device or per application)
8) Full device encryption (how much vs. battery life
and CPU)

Question 15

What is context-aware authentication?

Answer 15

Authentication that depends on contexts like: normal IP address, GPS information, Bluetooth devices, etc.

Question 16

What is containerization in mobile device management?

Answer 16

The attempt to separate the data that is stored on the device. (Example: Corporate and personal data on a BYOD)

Create a virtual “container”, a contained area to limit data sharing, for company data. Storage segmentation keeps data separate.

Question 17

What is a MicroSD HSM (Hardware Security Module)?

Answer 17

It provides security services, including encryption, key generation, digital signatures, and authentication. It can provide secure storage, protect private keys, or store cryptocurrency.

Question 18

What is a Unified Endpoint Management (UEM)?

Answer 18

Allows you to manage mobile and non-mobile devices. Applications can be used across different platforms.

Question 19

What is Mobile Application Management (MAM)?

Answer 19

Provisions, updates, and removes apps. It can create an enterprise app catalog. It can monitor application use. It can remotely wipe application data.

Question 20

What is SEAndroid?

Answer 20

Security Enhancements for Android

It uses SELinux. It supports access control security policies. SEAndroid is the default version since 4.3.

Protects privileged Android system demons. It changed Discretionary Access Control (DAC) to Mandatory Access Control (MAC), which moved from user-assigned control to object labels and minimum user access. It isolates and sandboxes Android apps.

Allows for Centralized policy configuration.

Question 21

What are some forms of Mobile Device Managament?

Answer 21

1) BYOD
2) Corporate owned, personally enabled (COPE)
- Org chooses and manages device, but it can be
used for personal
3) CYOD
- You choose, corporate buys, and can be used for
personal
4) Corporate-owned
5) Virtual Desktop Infrastructure/ Virtual Mobile
Infrastructure (VDI/ VMI)
- Apps and data are separated from the mobile
device