220-1002 · Question #525
A user installs a flashlight application on a phone. The user later discovers this application was stealing users' data files, pictures, call history, and other private information. The user wants…
The correct answer is A. Only install applications that request appropriate permissions. The flashlight app exploited excessive permissions it had no legitimate reason to request-a flashlight only needs camera flash access, not contacts, call history, or photos. Reviewing permission requests before installation and rejecting apps that request unrelated permissions…
Question
A user installs a flashlight application on a phone. The user later discovers this application was stealing users' data files, pictures, call history, and other private information. The user wants to prevent this from happening in the future. Which of the following would BEST prevent this from reoccurring?
Options
- AOnly install applications that request appropriate permissions
- BOnly install applications made by large and well-known companies
- CInstall an antivirus on the mobile OS.
- DUse a mobile device manager to increase security on the phone.
How the community answered
(29 responses)- A83% (24)
- B10% (3)
- C3% (1)
- D3% (1)
Explanation
The flashlight app exploited excessive permissions it had no legitimate reason to request-a flashlight only needs camera flash access, not contacts, call history, or photos. Reviewing permission requests before installation and rejecting apps that request unrelated permissions is the most direct prevention. Relying on company reputation (B) is insufficient since even established companies can publish rogue apps. Antivirus (C) and MDM (D) are reactive or broad controls that do not address the root cause of accepting inappropriate permissions.
Topics
Community Discussion
No community discussion yet for this question.