Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

CEH v11 Revision > Mobile Communications and IoT > Flashcards

Mobile Communications and IoT Flashcards

1
Q

What are the 3 main attack types for Mobile devices?

A
  1. Device attacks (Browser, SMS, App, Rooted/Jailbroken devices)
  2. Network attacks (DNS cache poisoning, rogue/evil twin APs, packet sniffing)
  3. Cloud attacks (Databases, photos, cloud data e.g. Apple iCloud)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

OWASP Top 10 Mobile Risks

M1 - Improper Platform Usage

A

Misuse of features or security controls (Android intents, TouchID, Keychain)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

OWASP Top 10 Mobile Risks

M2 - Insecure Data Storage

A

Improperly stored data and data leakage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

OWASP Top 10 Mobile Risks

M3 - Insecure Communications

A

Insecure handshaking, incorrect SSL, clear-text communication

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

OWASP Top 10 Mobile Risks

M4 - Insecure Authentication

A

Authenticating end user or bad session management

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

OWASP Top 10 Mobile Risks

M5 - Insufficient Cryptography

A

Code that applies cryptography to an asset, but is insufficient

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

OWASP Top 10 Mobile Risks

M6 - Insecure Authorization

A

Failures in authorization such as access rights

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

OWASP Top 10 Mobile Risks

M7 - Client Code Quality

A

Code level implementation problems

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

OWASP Top 10 Mobile Risks

M8 - Code Tampering

A

Binary patching, resource modification, dynamic memory modification

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

OWASP Top 10 Mobile Risks

M9 - Reverse Engineering

A

Reverse core binaries to find vulnerabilities and exploits

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

OWASP Top 10 Mobile Risks

M10 - Extraneous Functionality

A

Use of hidden or unknown functionality which could introduce series of vulnerabilities and exploits, such as backdoors that were inadvertently placed by coders

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is mean by untethered jailbroken device?

A

iOS device remains jailbroken after a reboot.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is mean by tethered jailbroken device?

A

Device only usable in a single boot when jailbroken this way, and patch is removed upon reboot. Device may get stuck in a boot loop if not repaired via computer based tools.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is meant by Semi-Tethered jailbreak?

A

iOS device remains jailbroken for a single session and removes the patch upon reboot, but is able to boot back up as normal without any issues such as boot loop.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

List 3 different Bluetooth discovery modes

A
  1. Discoverable - Answers all inquiries
  2. Limited Discoverable - Restricts some actions
  3. Non-Discoverable - Ignores all inquiries
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Why type of Mobile tools are:
1. KingoRoot
2. TunesGo
3. OneClickRoot
4. MTK Droid

A

Used for Android Rooting

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What type of mobile tools are:
1. evasi0n7
2. GeekSn0w
3. Pangu
4. Redsn0w
5. Absinthe
6. Cydia

A

Used for iOS jailbreaking

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What type of mobile exploits are these:
1. Userland Exploit
2. iBoot exploit
3. BootROM exploit

A

iOS jailbreaking exploits

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Which mobile attack method uses the following tools:
1. Obad
2. Fakedefender
3. TRAMPS
4. ZitMo

A

Trojans, can be used in phishing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Which mobile attack method uses the following tools:
1. Mobile Spy
2. Spyera

A

Spyware

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What type of mobile tools are:
1. BlueScanner
2. BT Browser
3. BlueSniff
4. btCrawler
5. Bloover
6. PhoneSnoop
7. Super Bluetooth Hack

A

Used for bluetooth hacking

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What are the 3 basic components of IoT architecture?

A
  1. Sensing Technology
  2. IoT gateways
  3. Cloud
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What are the 3 main characteristics of RIOT OS?

A
  1. Embedded System
  2. Actuator (moving) Boards
  3. Sensors
24
Q

Which 2 terms best describes ARM mbed OS?

A
  1. Used on wearables
  2. Low-powered
25
What is RealSense OS X mainly used in?
Sensors and cameras
26
Which 3 type of applications would you find Nucleus RTOS used in?
1. Aerospace 2. Medical 3. Industrial
27
What are the 4 method of communication in IoT?
1. Device to Device 2. Device to Cloud 3. Device to Gateway 4. Back-End Data Sharing
28
What are the 5 Architecture Levels in IoT?
1. Edge Technology (Sensors, RFIDs, Readers, Devices) 2. Access Gateway (First data handling, messages, routing) 3. Internet (Main component that provide communication via internet ) 4. Middleware (Data and device management) 5. Application (Front end delivery of service and data to users)
29
IoT Vulnerabilities and Attacks: I1 - Insecure Web Interface
Problems such as account enumeration, weak credentials, and no account lockout
30
IoT Vulnerabilities and Attacks I2 - Insufficient Authentication/Authorization
Assumes interfaces will only be exposed on internal networks and thus is a flaw
31
IoT Vulnerabilities and Attacks I3 - Insecure Network Services
May be succeptible to buffer overflow or DoS attacks
32
IoT Vulnerabilities and Attacks I4 - Lack of Transport Encryption/Integrity Verification
Data transported without encryption
33
IoT Vulnerabilities and Attacks I5 - Privacy Concerns
Due to collection of personal data
34
IoT Vulnerabilities and Attacks I6 - Insecure Cloud Interface
Easy-to-guess credentials make enumeration easy
35
IoT Vulnerabilities and Attacks I7 - Insecure Mobile Interface
Easy-to-guess credentials on mobile interface
36
IoT Vulnerabilities and Attacks I8 - Insufficient Security Configurability
Cannot change security which causes default passwords and configuration
37
IoT Vulnerabilities and Attacks I9 - Insecure Software/Firmware
Lack of a device to be updated or devices that do not check for updates
38
IoT Vulnerabilities and Attacks I10 - Poor Physical Security
Because of the nature of devices, these can easily be stolen
39
What does HVAC and what type of system is it?
Heating, Ventilation and Air Conditioning - Indoor climate control system
40
What is a Rolling Code attack?
Jam a key fob's communications, steal the code, and then create a duplicate code
41
What is a BlueBorne attack?
Attack against Bluetooth devices
42
IoT Hacking Methodology
1. Information Gathering 2. Vulnerability Scanning 3. Launching Attacks 4. Gaining Access 5. Maintaining Access
43
What type of device would you use the following tools against? 1. Foren6 2. Nmap 3. RIoT Vulnerability Scanner 4. beSTORM 5. IoTSploit 6. IoT Inspector 7. Firmalyzer 8. KillerBee 9. JTAGulator 10. Attify
IoT device hacking
44
What is a Blackjacking attack?
Act of hijacking a BlackBerry Connection. Using BlackBerry to bypass security.
45
What is BBProxy used for?
Allowing the attacker to use a BlackBerry device as a proxy between the internet and internal networks via covert channels. (Used part of Blackjacking attack)
46
What type of tools is BBScan?
Port scanning tool used against BlackBerry devices.
47
What type of tool is Blooover?
Bluetooth Hoover - Serves as an audit tool to check phones for vulnerable to Bluetooth vulnerabilities such as BlueSnarf.
48
What kind of Bluetooth attack is Bluesmacking?
DoS - Overflows bluetooth enabled devices with random packets
49
What kind of Bluetooth attack is bluejacking?
Sending messages over bluetooth enabled devices
50
What kind of Bluetooth attack is Bluesnarfing
Theft of information through via bluetooh on enabled devices
51
What kind of Bluetooth Utility is BlueSniff used for?
Bluetooth tool used for warwalking/wardriving discovery of Bluetooth devices.
52
What kind of Bluetooth attack is Bluebugging?
Remote access to a remote device via discoverable Bluetooth connection
53
What kind of Bluetooth attack is BluePrinting?
Collection of information about Bluetooth enable devices, includes manufacturer, device model, and firmware versions.
54
What is a piconet?
A network made of Bluetooth connected devices
55
What type of malware is ZitMo?
Banking malware, Zeus ported to Android

CEH v11 Revision (15 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions