chapter 8

Question 1

Mobile Infrastructure Risks

Answer 1

• Software
• Hardware
• Network
• Organization

Question 2

• fake access point
• can obtain user credentials
• it uses weak authentication methods
  
  • Open authentication
  • shared authentication
  • WEP
• This can be found in corporate environment, bookstore, basta sa public

Answer 2

Rogue Access point

Question 3

• Send deauthentication traffic
• Get user to re-enter credentials, but attacker is sniffing
• preventing a client from communicating with wireless network
• use rogue points that overpower the legitimate one

Answer 3

Denial of service

Question 4

• Drive around looking for unprotected wireless network

Answer 4

Wardriving

Question 5

• marks and symbols on the sidewalk or wall identifying a vulnerable access point

Answer 5

warchalking

Question 6

• intercept communication between the transmitter and receiver
• take advantage of weak encryption algorithm and weak keys

Answer 6

Man in the middle

Question 7

how to avoid man in the middle

Answer 7

• use stronger keys

- strong encryption methods, implemented correctly

Question 8

• spoof a carrier’s tower and infrastructure so that devices connect to it

Answer 8

• Tower spoofing

Question 9

use of untrusted or compromised applications on mobile devices

Answer 9

Software risks

Question 10

what app store that are safe

Answer 10

• apple and microsoft

Question 11

what app store that is not safe

Answer 11

• android

Question 12

malicious software

Answer 12

malware

Question 13

transferred via files or executable software from device to device

Answer 13

virus

Question 14

masquerades as a useful program

Answer 14

trojan

Question 15

self replicate across a network

Answer 15

worm

Question 16

steal data, password, credit card numbers

Answer 16

spyware

Question 17

install a program that allows you to modify the device in a way that it is not approved by the manufacturer

Answer 17

jailbreak

Question 18

user gains full administrative access

Answer 18

rooting

Question 19

software used to capture and record keystrokes sent to a device

Answer 19

key logging

Question 20

allows uncontrolled access to the hardware and root level permission of the device

Answer 20

unsupported OS

Question 21

• Create a duplicate of a smartphone, including firmware configuration
• Impersonate the legitimate owner of the device
• making and receiving phone calls, text messages and accessing data

Answer 21

device cloning

Question 22

the problem is that we store useful information in our phone

Answer 22

device theft

Question 23

Policies in Organization should address issues:

Answer 23

• Device Security
• Antivirus
• Forensics
• Patching
• Upgrades

Question 24

Detects malicious network traffic and unauthorized network access

Answer 24

Intrusion detection system

Question 25

Block or reroute traffic based on port, protocol, or IP address

Answer 25

Intrusion prevention system

Question 26

Loaded with known attack signatures or rules

Answer 26

signature-based systems

Question 27

learn the unique traffic patterns inherent in the network they are protecting

Answer 27

anomaly-based systems

Question 28

• Applications run in restricted memory space
• Application are firewalled from each other
• can’t share data or files

Answer 28

Application Sandboxing

Question 29

• Separation of corporate data from personal data on individual device
• Can also be implemented in a large infrastructure, such as a mass storage areas that contain device backups
• Separate corporate and private applications

Answer 29

Data containers

Question 30

• firmware chip that provides security functions
• usually contain cryptographic functions
• can encrypt the entire device, its storage and removable media
• better than software-based authentication and encryption

Answer 30

Trusted Platform modules

Question 31

• Restrict the types of data and files entering and exiting a device or network
• Prevent downloading of stuff
• can be placed upon the source of the content, blocking certain domains sites, and IP address

Answer 31

Content Filtering

Question 32

• Data breaches, hacking and unauthorized exfiltration of data by insiders
• Multilayer security effort
• classify data in terms of sensitivity and label it
• Store restricted data in folders, databases or media
• Physical controls

Answer 32

• DLP (Data loss prevention)