Troubleshoot Mobile OS and App Security

Question 1

Answer 1

In Android, each app has an Install unknown apps toggle. For example, enabling the toggle shown here would allow the Firefox browser to download and install an app.

Question 2

Answer 2

Managing location services in iOS (left) and Android.

Question 3

Root access

Answer 3

bypasses OS restrictions, enabling deep system modifications but also increasing security risks like malware exposure, loss of protections, and update incompatibility.

Question 4

Jailbreaking

Answer 4

bypasses iOS restrictions, allowing root privileges, sideloading apps, carrier changes, and interface customization, typically requiring a patched kernel and tethered booting.

Question 5

Kernel Patching

Answer 5

In a jailbreak, a vulnerability in the kernel is exploited to modify its behavior, allowing for the execution of unauthorized code and enabling jailbreak features

Question 6

Tethered Boot

Answer 6

A tethered jailbreak requires the device to be connected to a computer and the jailbreaking software to be running on the computer during boot. This is because the kernel patch is not persistent after a reboot.

Question 7

Rooting or jailbreaking bypasses

Answer 7

OS security controls for unrestricted access but disables protections, compromises management software, and removes corporate workspace segmentation, making the device untrusted.

Question 8

Mobile-device management (MDM) suites

Answer 8

detect rooted/jailbroken devices or unsigned custom firmware to block enterprise access, while containerization uses cryptography to secure workspaces against compromise.

Question 9

Developer mode

Answer 9

unlocks advanced settings and logs for app development but should not be enabled routinely, as it can be misused for installing unauthorized apps; MDM can block such devices.

Question 10

Trusted app sources

Answer 10

are managed by service providers that authenticate developers, issue signing certificates, analyze app security risks, and enforce policies like restricting certain content or functionality.

Question 11

App spoofing

Answer 11

involves rogue developers creating malicious apps that mimic legitimate ones, often using similar names and fake reviews to appear trustworthy. Common targets include VPNs, fake antivirus/ad blockers, and dating apps. Even when using official stores, users should be cautious, especially if an app requests unnecessary permissions.

Question 12

Enterprise app distribution

Answer 12

uses Apple Business Manager and Managed Google Play for private deployment, while Android allows sideloading via APK files, which can introduce security risks. MDM can restrict third-party stores and unauthorized apps.

Question 13

Bootleg apps

Answer 13

mimic legitimate ones, often used for piracy via sideloading or unauthorized stores, posing security risks like malware exposure while violating licensing and copyright protections.

Question 14

Mobile malware

Answer 14

symptoms include battery drain, slow performance, excessive data usage, intrusive ads, unauthorized app installations, and system crashes, requiring vigilance beyond antivirus protection.

Question 15

malware

A high number of ads

Answer 15

is common in free apps, but unexpected, intrusive, or overly personalized ads may signal tracking or spyware activity.

Question 16

malware

Fake security warnings

Answer 16

are a scareware tactic, tricking users into installing apps or granting excessive permissions to Trojan software.

Question 17

malware

sluggish performance

Answer 17

by running background tasks like data collection or cryptomining, leading to power drain and high resource usage.

Question 18

Malware

corrupt DNS

Answer 18

or search providers, leading to redirection attacks, spoofed sites, certificate warnings, and slow network performance.

Question 19

trojans

Spoofed or bootleg apps

Answer 19

may function as spyware, requesting excessive permissions, accessing cameras/microphones, copying files, or consuming bandwidth for botnet activity. Monitoring data usage helps detect suspicious behavior.

Question 20

Compromised devices

Answer 20

can leak personal data, leading to unauthorized access attempts, password changes, and account breaches, requiring vigilance and strong security practices.

Question 21

Unauthorized location tracking

Answer 21

\ can expose sensitive data, often for targeted advertising, but rogue apps may misuse it for malicious activities like burglary. Always review app permissions carefully.

Question 22

Cryptomining malware, or cryptojacking

Answer 22

involves using a victim’s computer resources without their knowledge or consent to mine cryptocurrency.

Question 23

blockchain currency
aka
cryptocurrency

Answer 23

is a digital form of currency that uses blockchain technology to record and verify transactions.

Question 24

remote wipe

Answer 24

is a security feature that allows administrators or users to erase all data and settings from a device remotely.

Question 25

APK (Android Package Kit)

Answer 25

is the file format used to distribute and install apps on Android devices.

Question 26

Developer Mode

Answer 26

unlocks advanced features and settings on various devices, primarily for testing, debugging, and developing applications.