nerdexam
EC-Council

312-50V11 · Question #1039

Jacob works as a system administrator in an organization. He wants to extract the source code of a mobile application and disassemble the application to analyze its design flaws. Using this…

The correct answer is A. Reverse engineering. Reverse engineering is the process of extracting and disassembling application code to analyze its internals, uncover vulnerabilities, and strengthen security.

Hacking Mobile Platforms

Question

Jacob works as a system administrator in an organization. He wants to extract the source code of a mobile application and disassemble the application to analyze its design flaws. Using this technique, he wants to fix any bugs in the application, discover underlying vulnerabilities, and improve defense strategies against attacks. What is the technique used by Jacob in the above scenario to improve the security of the mobile application?

Options

  • AReverse engineering
  • BApp sandboxing
  • CJailbreaking
  • DSocial engineering

How the community answered

(52 responses)
  • A
    92% (48)
  • B
    4% (2)
  • C
    2% (1)
  • D
    2% (1)

Why each option

Reverse engineering is the process of extracting and disassembling application code to analyze its internals, uncover vulnerabilities, and strengthen security.

AReverse engineeringCorrect

Reverse engineering involves deconstructing a compiled or packaged application by extracting its source code or bytecode and using disassemblers or decompilers to reconstruct its logic and design. Security administrators apply this technique to mobile applications to identify hidden flaws, undocumented behaviors, and exploitable vulnerabilities that cannot be discovered through black-box testing alone, ultimately enabling targeted bug fixes and improved defensive controls.

BApp sandboxing

App sandboxing is an OS-level isolation mechanism that restricts an application's access to system resources and other processes to contain potential damage, and does not involve extracting or disassembling application code.

CJailbreaking

Jailbreaking is the act of exploiting OS-level restrictions on a mobile device to gain elevated root privileges, and is not a method for disassembling or analyzing an application's internal source code or design.

DSocial engineering

Social engineering is a manipulation tactic that exploits human psychology to trick individuals into revealing sensitive information or performing harmful actions, and is entirely unrelated to extracting or analyzing application binaries.

Concept tested: Mobile application reverse engineering for vulnerability discovery

Source: https://owasp.org/www-project-mobile-security-testing-guide/

Topics

#reverse engineering#mobile app disassembly#code analysis#vulnerability discovery

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice