Examkin

Soru

Zorluk: OrtaTroubleshooting Mobile OS Security and Connectivity Issues

A user reports that a corporate-issued smartphone recently began displaying intrusive pop-up advertisements on the home screen. Additionally, the device occasionally drops its Wi-Fi connection and redirects web traffic to unknown external IP addresses. A technician inspects the device and finds that a system optimization utility was manually installed via an untrusted APK file. Which of the following actions should the technician take FIRST?

  1. Disconnect the device from all networks, then uninstall the sideloaded application and its associated profile.Cevap
  2. B
    Contact the cellular service provider to issue a SIM card profile update and reset cellular tower credentials.
  3. C
    Perform an immediate factory reset of the smartphone without inspecting installed application permissions.
  4. D
    Reconfigure the corporate wireless access points to switch from WPA3-Enterprise authentication to WPA2-Personal.

Cevap

Disconnect the device from all networks, then uninstall the sideloaded application and its associated profile.
Isolating the device from wireless and cellular networks immediately stops active background traffic and redirection attempts. Removing the manually installed sideloaded application and any rogue configuration profiles removes the source of unauthorized behavior without resorting to unnecessary full system resets.

Adım Adım Çözüm

1
Isolate the compromised mobile device
Network connectivity (Wi-Fi and cellular) is severed, preventing potential command-and-control communication or data exfiltration.
Immediate network isolation prevents active security threats from spreading or communicating externally.
2
Remove the malicious software and configuration
The untrusted APK application and any rogue profiles installed alongside it are removed from the operating system.
Targeted removal eliminates the root cause of the unauthorized access and pop-up symptoms without unnecessary data destruction.
3
Verify system security and re-establish network policy
The mobile OS functions normally and complies with corporate mobile device management rules.
Ensures the device is fully sanitized before reconnecting to enterprise resources.

Anahtar Kavram

Incident Isolation and Remediation of Sideloaded Mobile Malware
Bu soruyu puanla

Konular

Troubleshooting Mobile OS Security and Connectivity Issues

Bu konudan daha fazla soru