Questions

Android devices with an implementation of the Keymaster HAL that resides in a hardware security module use true random number generators (TRNG). What is one of the advantages TRNG has over pseudo-random number generators (PRNG)?

 

(A) TRNGs uses strong mathematical functions to secure key generation.

(B) TRNGs are better because they use external sources of information for entropy, such as electrical circuit noise.

(C) Pseudo-random number generators are actually the best, but too expensive to put in mobile devices.

(D) TRNGs are more efficient and use less battery power. This can help extend battery life considerably.

 

What are the benefits of Google-Hosted applications as opposed to Self-Hosted Applications?

 

(A) Enables managed security and infrastructure, including SSL/TLS implementation, prevent poor coding practice, no clear text password, Trademark infringement, and PHA detection.

(B) Supports sharing private apps up to 100 domains/Enterprises and Silent push feature.

(C) All of above

(D) Global infrastructure with cached repository and Reduced Data consumption with delta update.

 

After an internal review of a potentially compromised BYOD device, its determined that the user side-loaded a malicious app on the personal profile that harvested their contacts. Why was none of the data in the work profile accessible?

 

(A) Work profile sandboxing and app isolation prevented any access to the work data.

(B) The user detected unusual activity before the app had time to infect the work profile and turned off the phone.

(C) The IT admin noticed unusual activity in the personal profile and asked the user to bring IT the phone in for review.

(D) The device had a weak 4 digit device passcode policy so the app was able to access all information.

 

Which of the following is a network consideration when deploying Android Enterprise?

 

• (A) Traffic to Google endpoints should also bypass SSL inspection. SSL intercepted traffic to Google services are often interpreted to be man-in-the-middle attacks and are blocked.
• (B) Enable an inbound traffic connection to the EMM server, because Google needs to verify the EMM environment and its availability.
• (C) Enable only port 443 to ensure all of the data transaction are running through secured connection.
• (D) As long as the device and EMM can go to https://www.google.com it should be enough to satisfy the network requirements.

 

What are the steps to setup Managed Google Play? Select All Correct Responses

 

•  Identity and User Mapping: During operation, EMM will automatically send commands to ESA to create Managed Google Play Accounts and map them to EMM user Accounts.
•  Binding Enterprise: An Organization ID is created automatically and bounded with EMM and Enterprise Service Account.
• SSO Integration: IT integrates the local infrastructure with Managed Google Play Account service.
• Registration/Creation of Enterprise: IT creates a Gmail account ([email protected]) and uses it to register and create enterprise.

 

Phone Ltd. is building a new device with Android 11. Which of the following accurately describes the steps needed for them to obtain a GMS license from Google?

 

• Download source code from android.com/security,adhere to AER requirements, pass GMS test, Deploy GMS apps.
• Download source code from source.android.com, adhere to CDD, pass CTS, sideload GMS servers into the system.
• Download source code from source.android.com, adhere to AER requirements, pass CTS, apply for GMS license.
• Download the source code from source.android.com, adhere to CDD, pass CTS, apply for GMS license.