100% found this document useful (1 vote)
333 views2 pages

Mobile App Security Quiz Insights

The document discusses various topics related to mobile app security including types of mobile apps (native, hybrid, web), security concerns (confidentiality, integrity), attack vectors, permissions in Android, and examples of malware (Cabir, DroidDream). It provides definitions and examples to distinguish between native, hybrid, and web apps. It also identifies true statements about Android security models and permissions.

Uploaded by

Ankur Singh
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
100% found this document useful (1 vote)
333 views2 pages

Mobile App Security Quiz Insights

The document discusses various topics related to mobile app security including types of mobile apps (native, hybrid, web), security concerns (confidentiality, integrity), attack vectors, permissions in Android, and examples of malware (Cabir, DroidDream). It provides definitions and examples to distinguish between native, hybrid, and web apps. It also identifies true statements about Android security models and permissions.

Uploaded by

Ankur Singh
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd

Facebook and Pinterest are examples of:

Native Apps

Which security concerns are highlighted during a privacy breach?

Confidentiality and Integrity

Type of mobile apps that provide the highest degree of reliability:

Native Apps

Attacks that aim at performing malicious acts without being noticed:

Covert approach

Technique used by an attacker to gain access to another device may be broadly termed as:

Attack Vector

Which among the following are the most commonly exploited hardware features?

All the options

It is easy to detect poor code quality in an application

False

Android Version 4.4 is popularly know as __________

KitKat

The security model adopted by Android is: ________________

Permission based

Programs designed to gain root or administrative access to a device:

Rootkit

Instagram, Uber, Evernote are examples of:

Hybrid Apps

Which among the following malware are stand alone programs?

ALL the options

In Android, each application executes in its own environment and does not influence the
execution of other applications.

True

“Normal Permissions” in Android gives access to isolated application-level functionalities.

True

_____________ frees a iOS device from dependence on Apple as the exclusive source of
applications.

Jailbreaking

This study source was downloaded by 100000797727937 from [Link] on 04-01-2023 [Link] GMT -05:00

[Link]
The malware that is believed to be the first computer worm to infect mobile devices:

Cabir

Apps that render a consistent User Interface:

Native Apps

Apps that are associated with a single code base:

Web Apps

Which among the following are the impacts of insecure data storage?

All the options

Which among the following are part of the Application layer of Android architecture

All the options

The __________ permission is needed for an application to use telephony services, network
access or location information

Signature

Dangerous

Normal

DroidDream malware that hit the Android Market in 2011 is an example of:

Virus

Spyware

Botnet

Worms

This study source was downloaded by 100000797727937 from [Link] on 04-01-2023 [Link] GMT -05:00

[Link]
Powered by TCPDF ([Link])

Common questions

Powered by AI

Android ensures that each application executes in its own environment, which prevents interference with other applications . This separation enhances system stability, reduces risk of application conflicts, and improves security by isolating app-level functions, thus preventing cross-application data breaches or failures .

The primary security concerns during a privacy breach are confidentiality and integrity . These concerns relate to attack vectors as these vectors are techniques used by attackers to access devices or applications and potentially breach these security principles, thereby compromising sensitive data and application integrity .

Jailbreaking frees an iOS device from Apple's control, allowing the installation of unofficial apps and modifications . While this increases user freedom and software customization, it significantly weakens device security by bypassing built-in safeguards, exposing the device to malware and unauthorized access, ultimately affecting the integrity and reliability of iOS security mechanisms .

Malware attacks exploiting standalone program features, such as worms, differ in propagation by autonomously spreading across networks without requiring user interaction . This capability leads to rapid and widespread damage, as these programs can replicate and disseminate themselves effortlessly, unlike other malware types that require vectors like infected files or human actions .

Native app development is considered more reliable compared to web app development because native apps are built specifically for a platform, allowing them to leverage platform-specific optimizations and features, thus providing better performance and security . Web apps, with a single code base, are easier targets for code exploitation due to their universal compatibility across platforms and browsers, which can lead to increased vulnerabilities .

The permission-based security model in Android is designed to control app access to system features and user data, thereby minimizing the risk of unauthorized access . However, this model also places a burden on users to understand the permissions they grant, which can lead to security risks if users are not vigilant or informed. Additionally, while normal permissions allow limited functionality access, dangerous permissions allow broader access, which if mishandled can lead to significant security violations .

The covert nature of certain attack approaches means they are designed to execute malicious actions without being noticed, thereby evading detection mechanisms in mobile apps . This stealthiness complicates malware detection efforts since the attacks are often masked within legitimate-looking processes, making it difficult for security software to identify and mitigate these threats .

Native apps provide the highest degree of reliability and render a consistent user interface across devices . In contrast, hybrid apps like Instagram, Uber, and Evernote, although useable across various platforms, may not offer the same level of performance and UI consistency as native apps since they depend on web views and common code bases for different platforms .

Rootkit programs pose a significant threat to mobile device security by gaining root or administrative access to a device without user consent, allowing attackers to execute tasks with high privilege levels . This level of access can lead to unauthorized changes to system files, monitoring of user activities, and potential data theft, compromising device confidentiality and integrity .

Normal permissions in Android help maintain security by granting apps isolated, application-level functionalities without affecting other system operations . This isolation reduces the chances of an app compromising broader system integrity or accessing sensitive user data inadvertently, thereby enhancing overall device security .

You might also like