Deck 2: Android Security Essentials

Question 1

Android permissions can be extended by

A) Using keyword "extends".
B) Creating custom permissions in manifest file.
C) Permissions cannot be extended.
D) None are correct.

Answer 1

B

Question 2

Dangerous Permissions can cause real harm or damage to user's Personal ___________.

A) Data
B) Money
C) Device
D) All choices are correct.

Answer 2

D

Question 3

Which of the following is correct about Content providers in Android?

A) They are used to share data between devices
B) They are used to share data between applications
C) They are used to share data between applications signed with same certificate
D) Data read by content providers are deleted when application closes.

Answer 3

B

Question 4

Which of the following permissions is most dangerous and can cause severe damage to Device?

A) BRICK
B) REBOOT
C) SHUTDOWN
D) ACCESS_WIFI_STATE

Question 5

What is the reason for using Permissions in application development?

A) To protect data and code
B) To create patent
C) To make it work better
D) Application cannot be created without permissions

Question 6

Which of the following is the only Android application component which interacts with user?

A) Activity
B) Service
C) Content Provider
D) broadcast Receivers

Question 7

Which of the following is correct about Android permission PROCESS_OUTGOING_CALLS? (Choose two)

A) Allows an application to access call logs.
B) Allows an application to monitor or abort outgoing calls.
C) Allows an application to record outgoing calls.
D) Allows an application to divert incoming calls.

Question 8

Which XML tag is used to make use of protected features of the device?

A)
B)
C)
D)

Question 9

Signature permission is also known as: (Choose two)

A) System Permissions or Level three permission.
B) Special situation permissions.
C) All are correct.
D) None are correct.

Question 10

When are permissions enforced in Activities?

A) When they launched by Context.startActivity() or Context.startActivityFor Result().
B) When method Context.enforcepermission() is called.
C) When method Context.stopActivity() is called.
D) When Context.checkPermission() is called.

Question 11

Signature Permissions are granted automatically if and only if?

A) Requesting application were signed with same certificate as application which declared the permission.
B) Requesting application were signed with same certificate as Android device version number.
C) Requesting application were signed with same certificate as Android system image.
D) None are correct.

Question 12

Which of the following is correct about application level permissions?

A) They are required to contact with Android Operating system.
B) They are required for an Application to perform its operations.
C) They are required to create an application.
D) They are automatically created.

Question 13

How many level of protection are there in Permission?

A) Seven.
B) User Defined.
C) Four.
D) Depends of the Android OS version.

Question 14

Permission group is a concept of creating:

A) A group of similar permission
B) A group of all permissions in an Application
C) A group of all components in an Application
D) A group of all permissions irrespective of application

Question 15

Normal permissions can be converted into namespace using?

A) Permission group
B) Permission tree
C) Permission
D) Import statements

Question 16

Service is an Android component which runs in the background to perform background task.

A) True.
B) False.
C) Depends on the situation.
D) Services is not an Android component.

Question 17

Permissions can be added inside

A) AndroidManifest.xml.
B) Layout.xml file
C) Res folder
D) Bin folder

Question 18

Which permission listed below is a normal permission?

A) SET_WALLPAPER
B) READ_CALENDAR
C) FACTORY_TEST
D) REBOOT

Question 19

Application can send permissions programmatically.

A) Depends on developer
B) Yes but not all times
C) No
D) Yes

Question 20

What are the permissions which are granted automatically without user's approval called?

A) Signature Permissions
B) System Permissions
C) Dangerous Permissions
D) Normal Permission

Question 21

Which of the following is NOT true about "hasCode" attribute of tag?

A) Its default value is true.
B) When the value is false, the system does not try to load any application code when launching components.
C) There is no such attribute "hasCode" because every application contains some code and settings false cannot be an option.
D) It is only possible that an application would not have any code of its own, in case it is using nothing but built in component classes.

Question 22

Which permissions are displayed to user at the time of installing the application?
1- Dangerous permissions
2- Normal permissions
3- Signature permissions

A) Only 1
B) Both 1 & 2
C) Only 3
D) All are correct

Question 23

Level three permissions or signature and system permission are used to?

A) Integrate system builds
B) Access system resources
C) Access dangerous permissions
D) Integrate resources in the application

Question 24

Which of the following is NOT correct about setting "largeHeap" attribute of tag to true?

A) It allows us to increase the heap memory by fixed amount given as its value.
B) Its value is given in Mbps.
C) Its value affects the overall performance of the application.
D) If shared user ID is being used to allow multiple applications to use a process, they all must use this option consistently or they will have unpredictable results.

Question 25

Which of the following is true about the "description" attribute in the application tag?

A) The value must be set as a reference to the string resource.
B) It can be a raw string.
C) The default value is same as the application name if not value is assigned to it.
D) Its length must be equal to that of application label.

Question 26

Which of the following is NOT true about AndroidManifest.xml?

A) It is extensible
B) It is placed in root folder of the app.
C) It is not extensible
D) It is also called the policy file

Question 27

Which of the following in NOT true about setting the attribute installLocation to value "internalOnly"? (Choose two)

A) The default behavior of installation of application is same as that of giving value "internalOnly" to the installLocation attribute.
B) The application is installed on the internal device storage only.
C) If there is no space on the internal memory then the application gets installed on the external storage and moves back to internal storage as soon as the space is available. This is default behavior.
D) The application can be moved to external device storage if required.

Question 28

Broadcast Intents is a mechanism which allows messages to be sent to

A) Various Activity
B) Various services
C) Various Intents
D) Various Applications

Question 29

Which of the following is NOT true about "allowbackup" attribute of application tag? (Choose two)

A) Its default value is true.
B) If set to false then no backup or restore of the application will ever be performed.
C) If full system backup is made the application's data is saved via adb. This is in system's control and occurs in all cases whether the allowbackup has value true or false.
D) The default value of this attribute is false.

Question 30

grantUriPermission is the child element of which tag?

A)
B)
C)
D)

Question 31

What happens if the permission is not used in an application?

A) The application cannot be build
B) The application will return runtime error
C) The application cannot access system resources
D) The application force closes

Question 32

Which of the listed below is a component level permission?

A) Activity
B) Permission group
C) Permission tree
D) None are correct

Question 33

Which of the following is NOT true about manifest tag in AndroidManifest.xml? (Choose two)

A) It declares the application specific attributes
B) This can be put inside the application tag.
C) It declares the component specific attributes.
D) This is the must have tag in AndroidManifest.xml.

Question 34

Which of the following is NOT true about the versionCode attribute? (Choose two)

A) This is same as the version number of the application shown to the user
B) This must be an integer.
C) This must be a floating number
D) It must be incremented from the previous versionCode when releasing a new version of application.

Question 35

Which of the following is NOT true about the "killAfterRestore" attribute of the tag?

A) Normally, third-party applications will not need to use this attribute.
B) It means that whether the application should be terminated after its settings have been restored during an application restore operation.
C) The default value is true.
D) The true value of this attribute means that the application will be terminated once its settings are restored during a full-system restore

Question 36

Which of the below statement is true about Broadcast?
1) Broadcast receiver decides which broadcast it will receive
2) Broadcast will decide which receiver can receive its broadcast

A) Only 1 is true
B) Only 2 is true
C) Both 1 & 2 are true
D) None are correct

Question 37

Which of the following is NOT true about package attribute of manifest tag?

A) It may contain lowercase letters, numbers and underscores but not uppercase letters.
B) It serves as unique identifier for the application.
C) It is default name for the application process.
D) Once the app is published then the package name should not be changed.

Question 38

Which of the following is protected by component level permissions?

A) Application
B) Components
C) Application & Components
D) None are correct

Question 39

Which tag of the following cannot be placed inside the application tag?

A)
B)
C)
D)

Question 40

Which of the following is NOT true about sharedUserId attribute?

A) It is placed inside manifest tag.
B) By default Android assigns each application its sharedUserId value.
C) Applications can share the same user ID.
D) It is placed in the activity tag that needs to share the data with other application.

Question 41

Which of the following is true about "uiOptions" attribute of the ? (Choose two)

A) Its default value is "none".
B) "splitActionBarWhenNarrow" is a valid value for this attribute.
C) "hideActionBarWhenNarrow" is a valid value for this attribute.
D) It disables any other UI options in the layout resource files.

Question 42

Which of the following is NOT required for backing up data on cloud storage?

A) The class(backup agent) that extends BackupAgentHelper.
B) The application should be registered with the Google's backup service.
C) The backupAgent agent should be specified in application tag inside AndroidManifest.xml.
D) The internet permission in the AndroidManifest file to communicate with the Google server.

Question 43

Which of the following returns the most accurate location of user?

A) NETWORK_PROVIDER
B) GPRS_PROVIDER
C) GPS_PROVIDER
D) USER_LOCATION_PROVIDER

Question 44

Which of the following classes is provided by Android SDK to get user's location?

A) UserLocationManager
B) RemoteLocationManager
C) LocationManager
D) SystemLocationManager

Question 45

Which of the following is NOT the event that is notified by LocationListener when getting the user's location?

A) onLocationChanged
B) onStatusChanged
C) onProviderChanged
D) onProviderDisabled

Question 46

Which of the following is NOT true about setting two applications to share same Linux ID?

A) Both applications must be running in background to check if they are sharing same Linux ID.
B) The applications just need to be installed on single device, for checking their Linux ID, they need not to be running.
C) Android's adb tool can be used to check the applications that if they are sharing same Linux ID.
D) Making two applications sharing same Linux ID must have same value of sharedUserID in AndroidManifest.xml.

Question 47

Which of the following is NOT true about setting the "permission" attribute to tags?

A) Only one permission can be added to any tag
B) If permission is required by all components of the application then it should be specified in application tag.
C) The permission in the component overrides the permission in the application tag.
D) The permission can only be included in application or manifest tags.

Question 48

Which of the following is NOT true about the "label" attribute of the tag? (Choose two)

A) It should be set as a reference to a string resource.
B) It cannot be a raw string.
C) It is a user readable label for the application as a whole.
D) Its default value is same as that given to the "description" attribute.

Question 49

Which of the following is NOT true about "restoreAnyVersion" attribute of tag?

A) Its default value is "false".
B) If set to true, then user is allowed to restore any previous version of the application.
C) This is system level attribute and is used in rooted devices to restore any version of Android OS being used previously.
D) Indicates that the application is prepared to attempt a restore of any backed-up data set, even if the backup was stored by a newer version of the application than is currently installed on the device.

Question 50

Which of the following is NOT true about "preferExternal" value given to the installLocation attribute of the tag? (Choose two)

A) The application is installed on internal memory by default even if external memory is available
B) The application can be moved either to internal or external memory after installation.
C) The application cannot be moved to internal memory after installation.
D) The application is installed on external memory by default if space is available on external memory otherwise it's installed on internal memory.

Question 51

Which of the following is true about "supportsRtl" attribute of the tag?

A) It was included in API level 16.
B) It is placed in manifest tag.
C) By default its value is false and the layouts will be left to right.
D) Setting it true will place all the components in layout from right to left on screen by default.

Question 52

Which of the following permission can alone work if location is to be obtained using Network provider and GPS provider both?

A) android.permission.ACCESS_FINE_LOCATION
B) android.permission.ACCESS_COARSE_LOCATION
C) android.permission.ACCESS_MOCK_LOCATION
D) android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

Question 53

Which of the following is NOT true about the "Process" attribute of the tag?

A) Its default value is same as the package name and is set by the system itself.
B) It must be included in the manifest tag with the value of package name application.
C) If the name assigned to this attribute begins with a colon (':'), a new process, private to the application, is created when it's needed.
D) If the process name begins with a lowercase character, a global process of that name is created.

Question 54

Which of the following are helper classes provided by Android to backup data to Google server? (Choose two)

A) FileBackupHelper
B) DatabaseBackupHelper
C) SharedPreferencesBackupHelper
D) MapBackupHelper

Question 55

Which of the following is NOT true about "auto" value given to the installLocation attribute in the tag?

A) By default, when an application is installed for the first time, a memory error is given in case the space is not available in the internal memory.
B) The application is installed on internal memory by default if space is available
C) In case of unavailability of space in internal memory the application is installed on external memory
D) Once installed, the application can be moved from internal to external memory and vice versa.

Question 56

What is the standard unit of distance value passed to requestUserUpdates() function to get location updates?

A) miles
B) meters
C) kilo meters
D) inches

Question 57

Which one of the following is NOT true about "taskAffinity"?

A) It can be placed inside manifest tag.
B) It can be placed inside application tag.
C) It can be placed inside activity tag
D) The name of the default affinity for an application is the package name set by manifest tag

Question 58

Which of the following is NOT true about theme attribute?

A) A reference to a style resource is set through it.
B) It can be placed inside manifest tag.
C) It can be placed inside application tag.
D) It can be placed inside activity tag.

Question 59

Which of the following is NOT true about "TestOnly" attribute in tag?

A) Indicates whether this application is only for testing purposes.
B) If this attribute is set to true, the application can only be installed through adb.
C) It may expose functionality or data outside of itself that would cause a security hole, but is useful for testing.
D) It is system level attribute so it is included in manifest tag.

Question 60

What is the standard unit of time value passed to requestUserUpdates() function to get location updates?

A) seconds
B) Minutes
C) microseconds
D) milliseconds

Question 61

Which Protocol is used to ensure data integrity in Android?

A) Real-time Transport Protocol (RTP)
B) Secure Socket Layer (SSL)
C) Transfer Control Protocol (TCP)
D) Internet Protocol (IP)

Question 62

In DRM system, Content and Rights object are stored inside?

A) Content server
B) Rights server
C) Storage Device
D) DRM agent

Question 63

Which of following work with OEM's to adapt security rules to suit their needs?

A) Application developers
B) Carrier providers
C) Government Organization
D) Operating system Vendors

Question 64

Which of the following is the focus of confidentiality?

A) Permissions of an application
B) Privacy of application files
C) Privacy of user data
D) Privacy of Google data

Question 65

Payment process in an application are always advisable to be performed by:

A) The application itself
B) A payment library
C) Experienced payment gateway companies
D) Google wallet

Question 66

During transit, Data integrity ensures that data is:

A) Transferred successfully
B) Rolled back if transaction not successful
C) Not altered or modified
D) Encrypted

Question 67

What is the state of data stored in SD cards, device memory, back-end servers, or databases?

A) Data in Use
B) Data at rest
C) Data in transit
D) Volatile state

Question 68

Which of the following is the recommended standard to be followed in applications that process credit card numbers?

A) Data Security Standard
B) Payment card industry standard
C) ISO/IEC standard
D) EMV standard

Question 69

If credit card numbers and passwords are stored in device they should to be in

A) Raw Form
B) Encrypted Form
C) Hash Form
D) Text file

Question 70

An application can act as a root and cause escalation of services, if there is a fault in which of the following?

A) Application
B) Service provider
C) Hardware
D) Operating system

Question 71

Digital rights management (DRM) is access control technology for which of the following

A) SD card
B) Applications
C) Android Device
D) Operating System

Question 72

Which of the following is NOT a component of the DRM system?

A) Content server
B) Rights server.
C) DRM agent.
D) Switching device.

Question 73

Which of the following is NOT true about the persistent attribute?

A) It indicates whether or not the application should remain running at all times.
B) It is placed in manifest tag because it is a system property.
C) It is placed in application tag
D) It is normally intended for system applications.

Question 74

Which of the following is NOT true about the "enabled" attribute of the tag?

A) If this attribute is set to "true", the Android system can instantiate application components
B) This attribute can be overridden by components.
C) Its default value is "true".
D) To launch an activity from another activity this attribute must be specified in the launching activity's tag.

Question 75

Which of the following is NOT true when setting attribute "ManageSpaceActivity" to true? (Choose two)

A) It is placed inside application tag.
B) Its value is the name of package inside which the activity that manages space exits.
C) It is placed inside the activity tag
D) The activity should also be declared with an activity tag.

Question 76

Which of the following is a perfect example of a thick client?

A) Application which stores personal data on Mobile Device
B) Application which stores application settings on Mobile Device.
C) Application which stores personal data on Server only
D) Application which stores personal data in cache

Question 77

Which of the following is a safe place to store user data?

A) Backend servers.
B) Mobile devices.
C) SD Cards.
D) Third party applications.

Question 78

Which of the following can be used to share a component among applications written by same author?

A) Custom permission
B) System Permission
C) Component permission
D) Special level kernel permissions

Question 79

Which of the following are the three principles of data security?

A) Availability, Portability, and Maintainability (APM)
B) Confidentiality, Integrity, and Availability (CIA)
C) Availability, Protection, and Integrity (API)
D) Granularity, Integrity, and Security (GIS)

Question 80

Which of the following is NOT true about logo attribute of the tag?

A) It represents logo for the application as whole.
B) It also represents default logo for the activities.
C) It must be set as a reference to a drawable resource containing the image.
D) If this attribute is not found, then the default logo (e.g ic_launcher) that exists in "drawable" folder is set as logo.