Chapter 38 · Quiz

Mobile Device Vulnerabilities Quiz

Seven questions covering mobile security challenges, jailbreaking, rooting, sideloading, and MDM controls.

Q1. A security administrator notices that a company-issued iPhone is enrolled in the MDM but is no longer accepting configuration profile updates. Encryption verification returns "unknown" and a remote wipe command timed out with no response. An integrity check reports that the device's OS has been modified. Which of the following BEST describes what has occurred?

A. The device has been affected by a man-in-the-middle attack intercepting MDM communication B. The MDM server certificate has expired, breaking communication with the device C. The device has been jailbroken, compromising the OS integrity the MDM relies on D. The device's storage is full, preventing configuration profiles from being written

Q2. An employee wants to install an application on their Android device that is not available in the Google Play Store. The employee enables "Install Unknown Apps" in the device settings and installs the application from the developer's website. What security risk does this MOST directly introduce?

A. The device will automatically be rooted when the app is installed from an unknown source B. The application bypasses the Play Store vetting process; it has not been reviewed for malicious code and could be a Trojan horse C. Installing apps outside the Play Store requires root access, which compromises the device's MDM enrollment D. The operating system will flag the app as malicious and prevent it from running

Q3. Which of the following CORRECTLY pairs each mobile platform with its terminology for installing custom firmware to gain root-level OS access?

A. Android = jailbreaking; Apple iOS = rooting B. Android = rooting; Apple iOS = jailbreaking C. Both Android and iOS use the term "jailbreaking" D. Both Android and iOS use the term "rooting"

Q4. An organization implements MDM on all company-issued mobile devices and enforces a policy that prohibits jailbreaking. A security analyst discovers that one employee's iOS device has been jailbroken. Beyond unenrolling the device, what is the PRIMARY security concern the analyst should address?

A. The device may now be running an older version of iOS that has unpatched vulnerabilities B. Jailbreaking voids the device's warranty, making the organization financially liable for hardware failures C. Sideloaded applications may have been installed from untrusted sources; a Trojan horse app may have been present and exfiltrating data during the period of MDM non-compliance D. The MDM server may also be compromised because the jailbroken device communicated with it

Q5. Which of the following BEST explains why an MDM agent on a jailbroken device cannot reliably enforce security policies?

A. The MDM agent is automatically deleted when a device is jailbroken B. Jailbreaking blocks network communication between the device and the MDM server C. The MDM agent enforces policies through OS APIs; on a jailbroken device the OS has been replaced by untrusted firmware that cannot be relied upon to honor those API calls D. MDM agents require a valid Apple developer certificate, which becomes invalid after jailbreaking

Q6. An organization's acceptable use policy (AUP) prohibits jailbreaking and rooting of any mobile device enrolled in MDM, with violations subject to termination. An employee argues that this policy is unnecessary because "the MDM will catch any security issues anyway." Which response BEST explains why the AUP restriction is needed in addition to MDM?

A. The AUP is needed because MDM cannot connect to jailbroken devices at all B. The AUP restriction is necessary because jailbreaking compromises the OS integrity that MDM depends on — the MDM cannot fully enforce policies on a jailbroken device, making it ineffective precisely when it is most needed C. The AUP is needed only to prevent warranty voiding, not for security reasons D. The employee is correct — MDM is sufficient and the AUP restriction is redundant

Q7. Match each term to its correct description.

Select the answer that correctly pairs ALL four terms with their descriptions.

Match each item on the left with its correct description on the right:

Jailbreaking

Rooting

Sideloading

MDM

A. Installing applications from sources outside the official, vetted app store, bypassing the security review process

B. Installing custom firmware on an Android device to gain superuser access, bypassing manufacturer restrictions

C. Installing custom firmware on an Apple iOS device to gain root-level access, bypassing Apple's OS restrictions

D. A platform that remotely manages, monitors, and enforces security policies on enrolled mobile devices via OS APIs

Click choices on the right to assign them to the items above.