Soru

Zorluk: OrtaMobile Device and Embedded System Security

A systems administrator is provisioning standalone Android-based digital signage kiosks deployed in public transit stations. The administrator needs to protect these embedded endpoints against unauthorized software installation, interface tampering, and OS-level access by members of the public. Which TWO of the following security configurations should be implemented to best harden these devices?

  1. Enforce application whitelisting and enable a single-app kiosk mode profile to restrict navigation.Cevap
  2. Disable hardware interface options such as USB debugging and restrict firmware access with administrative credentials.Cevap
  3. C
    Configure all kiosks to connect to an open wireless network using WPA2-Personal with shared pre-shared keys.
  4. D
    Install physical bollards and privacy filters around the kiosks to prevent remote network exploit attempts.

Cevap

The administrator should enforce application whitelisting with kiosk mode and disable USB debugging while securing firmware access.
Hardening embedded kiosks requires restricting the software layer through application whitelisting and kiosk mode profiles, alongside locking down physical debugging interfaces like USB debugging and securing bootloader/firmware settings.

Adım Adım Çözüm

1
Identify software restrictions required for public-facing embedded kiosks.
Configuring single-app kiosk mode combined with application whitelisting ensures users cannot leave the designated app interface or run unapproved software.
Public terminals are highly vulnerable to unauthorized software installation and operating system navigation.
2
Identify physical and hardware interface hardening measures.
Disabling USB debugging and protecting firmware modifications prevents physical access exploits via external media or debug connections.
Physical access to exposed ports like USB can allow attackers to bypass software controls if debugging interfaces remain active.

Anahtar Kavram

Embedded System and Kiosk Device Hardening Controls
Bu soruyu puanla