CompTIA ADR-001 - CompTIA Mobile App Security+ Certification Exam (Android Edition) Exam
Page: 3 / 21
Total 102 questions
Question #11 (Topic: )
Adding an Intent Filter to an Activity could cause a security issue because:
A. activities with Intent Filters are unprivileged by default.
B. it bypasses Android’s default filters.
C. activities with Intent Filters are exported by default.
D. it violates the Android sandbox security model.
Answer: C
Question #12 (Topic: )
Which of the following describes why a developer should define private wrappers around
native and public native methods?
native and public native methods?
A. To prevent untrusted callers from invoking native methods.
B. To filter data that is sent to the native methods.
C. Because native methods cannot be called directly.
D. To impose naming convention on methods.
Answer: A
Question #13 (Topic: )
How does HTTP Basic Authentication work?
A. A client-specific secret value is combined with a server-specific secret value to form a master secret, which is then used to sign all communications.
B. A one-time use token (nonce) is generated by the server and sent to the client, where it is then returned on each subsequent request.
C. A digital signature is generated of the request using the clients private key and sent to the server.
D. A username and password are combined into a string on the client, base 64 encoded, and then sent to the server as an HTTP header.
Answer: D
Question #14 (Topic: )
Which of the following provides an enumeration of software weaknesses to be avoided?
A. Open IOC (MANDIANT)
B. Metasploit Framework (RAPID7)
C. NVD (NIST)
D. CWE (MITRE)
Answer: D
Question #15 (Topic: )
Which of the following is TRUE regarding permissions?
A. Users cannot review permissions before installing an app
B. Android permissions do not change between versions
C. Over-permissioned apps increase the risk to the end user
D. Apps are granted access to contacts data without requesting permissions
Answer: C
