Mobile device vulnerabilities and threats MCQs

Phishing is a common method used by attackers to trick users into providing sensitive information, such as login credentials, on mobile devices.

Malware is a generic term for malicious software, and when designed for mobile devices, it is referred to as mobile malware.

Jailbreaking is the unauthorized process of removing manufacturer restrictions on a mobile device.

NFC technology in mobile devices is commonly used for mobile payments and other contactless transactions.

Man-in-the-Middle (MitM) attacks are a potential security risk when using public Wi-Fi networks, where attackers intercept and manipulate communication between the device and the network.

Smishing is the practice of sending fraudulent text messages to trick individuals into disclosing sensitive information.

Bluesnarfing is the unauthorized access to a mobile device through exploiting Bluetooth connections.

Vishing (voice phishing) involves manipulating individuals into revealing sensitive information through voice communication.

Bluesnarfing involves attackers gaining access to sensitive information by intercepting wireless communication between devices, typically through Bluetooth.

Geotagging is the process of adding geographical information, such as GPS coordinates, to digital media, allowing location tracking.

Eavesdropping involves the unauthorized access of a mobile device's camera and microphone for surveillance purposes.

Data leakage is a primary security concern associated with mobile app permissions, as apps may access and share more data than necessary.

A Trojan is a type of malware that disguises itself as a legitimate app to deceive users.

Spoofing involves the manipulation of a device's unique identifier to impersonate another device on a network.

Bluejacking is the unauthorized access of a mobile device's Bluetooth connection to send unsolicited messages.

GPS spoofing involves the manipulation of the device's GPS to provide false location information.

Smishing is the practice of sending unsolicited text messages to mobile users with malicious content.

Bricking is the intentional rendering of a device unusable, often through malware or unauthorized modifications.

Two-factor authentication (2FA) provides two different types of user identification, typically involving something the user knows (password) and something the user has (e.g., a mobile device).

Exploiting a patch refers to attackers gaining unauthorized access to a mobile device by exploiting a known vulnerability for which a patch is available.

The primary purpose of mobile device encryption is to protect data stored on the device from unauthorized access.

A brute-force attack involves attackers gaining unauthorized access to a mobile device by attempting various password combinations.

Data leakage is the unintentional disclosure of sensitive information through mobile apps.

USB tethering involves attackers gaining unauthorized access to a device's stored data by exploiting a USB connection.

A zero-day attack involves attackers gaining unauthorized access to a mobile device by exploiting a previously unknown vulnerability.

Secure boot is designed to protect against unauthorized access during the startup process of a mobile device.

Tethering is the unintentional sharing of a mobile device's network connection with other devices.

DNS hijacking involves the manipulation of the Domain Name System (DNS) to redirect users to malicious websites.

Bluesnarfing is the unauthorized access of a mobile device's Bluetooth connection to extract information without the user's knowledge.

Mobile Device Management (MDM) systems are used to manage and secure mobile devices within an organization, including enforcing security policies and configurations.

Wi-Fi hijacking involves attackers using deceptive Wi-Fi networks to trick mobile devices into connecting to a malicious network.

The primary purpose of a VPN on a mobile device is to secure communication over public networks, providing a private and encrypted connection.

A Man-in-the-Middle (MitM) attack involves attackers intercepting and altering communication between two parties without their knowledge.

Phishing involves attackers sending emails with malicious content, often with the intention of tricking users into revealing sensitive information.

Device encryption in mobile security is used to protect data stored on the device from unauthorized access.

Jailbreaking involves gaining unauthorized access to a device's operating system and removing manufacturer restrictions.

Disinformation is the intentional spreading of false information or rumors through various channels, including mobile apps and social media.

Eavesdropping involves attackers gaining unauthorized access to a device's microphone to listen in on conversations.

Remote Wipe in mobile security is used to delete sensitive data from a lost or stolen device remotely.

USB hijacking involves attackers using a malicious USB charging station to install malware on connected devices.

Screen timeout is a security feature that allows mobile devices to automatically lock after a period of inactivity.

DNS hijacking involves attackers using a legitimate website's domain to trick users into visiting a malicious site by manipulating the Domain Name System.

Data leakage is the unintentional sharing of sensitive information through mobile apps due to insecure data storage practices.

Mobile Application Management (MAM) is used to manage and secure mobile applications within an organization.

Location tracking involves attackers gaining unauthorized access to a device's location data.

GPS jamming is the intentional disruption of a mobile device's GPS signal.

Base station hijacking involves attackers using fake base stations to intercept mobile communications.

App sandboxing is used to isolate and secure individual apps from each other, preventing them from accessing each other's data.

Bluesnarfing involves attackers gaining unauthorized access to a device's contacts and address book.

RFID spoofing is the intentional modification of a mobile device's radio frequency identification (RFID) data.