GIAC GMOB Exam Overview:
| Certification Vendor: | GIAC (Global Information Assurance Certification / SANS Institute) |
|---|---|
| Exam Name: | GIAC Mobile Device Security Analyst (GMOB) Certification Exam |
| Exam Number: | GMOB |
| Exam Duration: | 120 minutes |
| Available Languages: | English |
| Exam Price: | $999 USD |
| Certificate Validity Period: | 4 years |
| Exam Format: | Proctored, Multiple Choice |
| Real Exam Qty: | 75 |
| Passing Score: | 71% |
| Recommended Training: | SANS SEC575: iOS and Android Application Security Analysis and Penetration Testing |
| Exam Registration: | GIAC GMOB Official Certification Page |
| Sample Questions: | GIAC GMOB Sample Questions |
| Exam Way: | Online proctored exam (remote proctoring via ProctorU or onsite via Pearson VUE) |
| Pre Condition: | No formal prerequisites required. SANS SEC575 training (iOS and Android Application Security Analysis and Penetration Testing) is strongly recommended. |
| Official Syllabus URL: | https://www.giac.org/certifications/mobile-device-security-analyst-gmob |
GIAC GMOB Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| Network Traffic & Application Interaction | - Mobile network traffic analysis
|
| Reverse Engineering & Application Manipulation | - Reverse engineering mobile applications
|
| Mobile Malware & Threat Mitigation | - Device loss and theft mitigation
|
| Mobile Device Platforms & Security Models | - Android security
|
| Mobile Application Security Analysis | - Analyzing mobile application binaries and permissions
|
GIAC Mobile Device Security Analyst Sample Questions:
Which iOS software can be used to perform a jailbreak?
Response:
- A. Android Debug Bridge (ADB)
- B. Microsoft Teams
- C. Cydia
- D. BlackBerry Desktop Manager
Correct Answer: C 🗳️
How does encryption contribute to data security on stolen mobile devices?
Response:
- A. It enhances the speed of the device
- B. It improves the accuracy of GPS tracking
- C. It reduces battery consumption
- D. It prevents unauthorized access to data
Correct Answer: D 🗳️
When testing the robustness of an app's session management, what type of attack vector should be explored?
Response:
- A. Session hijacking
- B. Social engineering
- C. Phishing
- D. Denial of Service
Correct Answer: A 🗳️
What aspect does MASVS L2 add to the basic security requirements of L1?
(Choose Three)
Response:
- A. Usage of more secure data storage and communication mechanisms
- B. Enforcement of stronger encryption algorithms
- C. Compliance with specific industry regulations
- D. Protection against reverse engineering
Correct Answer: A,B,D 🗳️
Which of the following are common tools used for rooting Android devices?
(Choose Two)
Response:
- A. RedSn0w
- B. iTunes
- C. SuperSU
- D. Odin
Correct Answer: C,D 🗳️
Viewing page 1 out of 31 pages.
Viewing questions 1-5 out of 152 questions.
We're so confident of our products that we provide no hassle product exchange.


By Douglas

