vmartinez

What kernel protection mechanism helps prevent hijacking functions and pieces of code from apps and using those apps and their permissions to perform malicious actions.

 

(A) CFI – Control Flow Integrity.

(B) PIE – Position Independent Execution.

(C) Secure Computing or SECComp.

(D) ASLR – Address Space Layout Randomization.

 

What type of keystore implementation would prevent complicated forensic data extractions and analysis of lost or stolen devices for example, leaking information via power, timing, electromagnetic radiation, and thermal radiation examination?

 

(A) StrongBox.

(B) HeavyChip.

(C) StongBuilt.

(D) SQLite SB.

 

Mike, Head of Mobility Security at Bank Ltd, wants to disable all fingerprint authentication from devices. He believes that an image of the biometric data is extracted from the devices and stored in Google Cloud. Which of the following facts would you use to easy Mikes concern? (Select 2) Select All Correct Responses

 

(A) The device does not take an image of the print but a biometric model that then uses an algorithm to create a mathematical template.

(B) Fingerprint images are stored in a database on the users filesystem. That makes them inaccessible to Google.

(C) A biometric template cannot be copied to another device because it is signed with a device specific key when stored in the TEE.

(D) You assure Mike that it’s a common practice for all cloud companies to store biometric data for compliance.

 

What are the two benefits that you would highlight for a customer looking to deploy applications via Managed Google Play? Select All Correct Responses

 

(A) Prevents admins from setting permissions to ensure app safety.

(B) Allows admins to create allow and block lists for public apps.

(C) Safeguards devices by preventing private app deployment.

(D) Removes the need for app wrapping.

 

Acme Printing developed an app for their custom printers. A new developer joined the company to maintain the app. He made an update to the original APK and created a new app signing key for the update. What is the reason the APK will fail to be updated in the Google Play Console?

 

(A) APK must be signed with the same key as the original APK.

(B) The APK file size exceeds 1.0 GB.

(C) The APK gets flagged for impersonation since it’s uploaded by a new developer at the company.

(D) The Developer needs to delete the APK from Google Play and redeploy.

 

Excerpt from Helpdesk/User Chat:

 

(A) Disable Chrome in the work profle.

(B) Create a Terms of Service banner that tells users not to open suspicious websites.

(C) Set a managed configuration on Chrome to prevent users from disabling Safe Browsing.

(D) Set a managed configuration on Chrome to prevent users from disabling incognito mode.