Security+ Cengage Module6: Mobile and Embedded Device Security

Ahmet is explaining to his team members the security constraints that have made it a challenge to protect a new embedded system. Which of the following would Akira NOT include as a constraint?

• Authentication

• Cost

• Power

• Ease of use

Answer explanation

Ease of recovery, not ease of use, is a constraint in which a compromised sensor may have difficulty recovering to its normal state following an attack

Yusuf has been asked to experiment with different hardware to create a controller for a new device on the factory floor. He needs a credit-card sized motherboard that has a microcontroller instead of a microprocessor. Which would be the best solution?

• SoC

• Raspberry Pi

• Arduino

• FPGA

Answer explanation

Arduino is designed as a controller for other devices instead of as a complete computer.

Musa needs a tool with a single management interface that provides capabilities for managing and securing mobile devices, applications, and content. Which tool would be the best solution?

• UEM

• MDM

• MCCM

• MMAM

Answer explanation

All of the capabilities in MDM, MAM, and MCM can be supported by unified endpoint management (UEM).

In a job interview, Deniz asks about the company policy regarding smartphones. He is told that employees may choose from a limited list of approved devices but that he must pay for the device herself; however, the company will provide her with a monthly stipend. Which type of enterprise deployment model does this company support?

• BYOD

• DYOD

• CYOD

• Corporate-owned

Answer explanation

In a choose your own device (CYOD) model, employees may choose from a limited list of approved devices but they must pay for the device themselves; however, the company will provide them with a monthly stipend

Eren has been asked to provide information regarding adding a new class of Android smartphones to a list of approved devices. One of the considerations is how frequently the smartphones receive firmware OTA updates. Which of the following reasons would Eren NOT list in their report as a factor in the frequency of Android firmware OTA updates?

• OEMs are hesitant to distribute Google updates because it limits their ability to differentiate themselves from competitors if all versions of Android start to look the same through updates

• Because many of the OEMs have modified Android, they are reluctant to distribute updates that could potentially conflict with their changes

• Wireless carriers are reluctant to provide firmware OTA updates because of the bandwidth it consumes on their wireless networks

• Because OEMs want to sell as many devices as possible, they have no financial incentive to update mobile devices that users would then continue to use indefinitely

Answer explanation

Bandwidth usage is not a consideration with OTA updates

What is the process of identifying the geographical location of a mobile device?

• Geotracking

• Geolocation

• GeoID

• Geomonitoring

Answer explanation

Geolocation is the process of identifying the geographical location of the device

Which of the following is NOT an advantage of COPE for an enterprise?

• Simplified IT infrastructure

• Cost savings

• Flexibility in management

• More oversight

Answer explanation

Less oversight is an advantage, not more oversight, because businesses do not need to monitor employee telecommunications usage for overages or extra charges

Ceyhun received a request by a technician for a new portable computer. The technician noted that they wanted USB OTG support and asked Ceyhun’s advice regarding it. Which of the following would Ceyhun NOT tell them is an advantage?

• A device connected via USB OTG can function as a peripheral for external media access.

• A device connected via USB OTG can function as a host.

• USB OTG is only available for connecting Android devices to a portable computer

• Connecting a mobile device to an infected computer using USB OTG could allow malware to be sent to that device

Answer explanation

An OTG (USB On-the-Go) mobile device with a USB connection can function as either a host (to which other devices may be connected such as a USB flash drive) for external media access or as a peripheral (such as a mass storage device) to another host.

Ozan has received a phone call from his supervisor that a new employee has attempted to download and install an unapproved app that allows her to circumvent the built-in limitations on her Android smartphone. What is this called?

• Rooting

• Sideloading

• Jailbreaking

• Ducking

Answer explanation

Users who circumvent the installed built-in limitations on their smartphone are jailbreaking on Apple iOS devices and rooting on Android devices

What is another name for run-time verification?

• Static code analysis

• Dynamic code analysis

• Fuzzering

• Weighted code analysis

Answer explanation

Security testing performed after the source code is compiled is a process called dynamic code analysis or run-time verification when all components are integrated and running