An Analyst Is Investigating Behavior on a Corporate-Owned, Corporate-Managed Mobile

question 7

Multiple Choice

An analyst is investigating behavior on a corporate-owned, corporate-managed mobile device with application whitelisting enabled, based on a name string. The employee to whom the device is assigned reports the approved email client is displaying warning messages that can launch browser windows and is adding unrecognized email addresses to the "compose" window. Which of the following would provide the analyst the BEST chance of understanding and characterizing the malicious behavior?

• A) Reverse engineer the application binary.
• B) Perform static code analysis on the source code.
• C) Analyze the device firmware via the JTAG interface.
• D) Change to a whitelist that uses cryptographic hashing.
• E) Penetration test the mobile application.

---

Definitions:

Neutral Fiber

In beam bending, it's the fiber at the midpoint of the cross section which experiences no compressive or tensile stress when the beam is flexed.

C-Channel Frame

The structure of a frame, often used in vehicle construction or building, characterized by its cross-sectional shape resembling the letter "C", providing strength and flexibility.

Flanges

Flat rims, edges, ribs, or collars, often used to strengthen an object, attach it to another object, or for handling.

Section Modulus (SM)

A geometric property for a given cross-section used in the design of beams or flexural members.