SY0-701 Question 104
Select 2Mobile device: Side loading , JailbreakingA company allows employees to use smartphones to access email, file-sharing, and an internal CRM app through a mobile device management (MDM) platform. During an investigation, the security team discovers that one employee installed a third-party app store to load an unofficial VPN app that is not available in the device's approved app marketplace. The same device is also found to have operating system protections removed so the user could install unsigned apps. Which TWO issues best describe what occurred on this device?
- A
The device was rooted or jailbroken to bypass built-in operating system restrictions
- B
The device used side loading to install an app outside the approved app store
- C
The device was SIM cloned to duplicate the carrier identity for network access
- D
The device used NFC pairing, which automatically disables application signature checks
- E
The device was carrier unlocked, which allows installation of any unsigned application
Show answer and explanation
Correct answers: A, B
Explanation
The scenario describes two separate but related mobile device risks commonly covered in Security+: side loading and rooting/jailbreaking. Installing an unofficial VPN app from a third-party app store is side loading because the app came from outside the organization's approved marketplace. Removing operating system protections so unsigned apps can be installed indicates the device was rooted or jailbroken. In enterprise security practice, both conditions are high risk because they undermine the trusted software model, weaken platform security controls, and can violate MDM compliance policies. Best practices from major mobile platform vendors and enterprise mobility guidance recommend blocking or detecting rooted/jailbroken devices, restricting app installation sources, enforcing approved app stores, and using MDM or UEM compliance policies to quarantine noncompliant devices from corporate resources.
- A. Correct.
Correct. Rooting on Android or jailbreaking on iOS refers to removing or bypassing manufacturer and operating system security restrictions to gain elevated control over the device. This commonly enables installation of unapproved or unsigned software, weakens sandboxing and platform protections, and increases the risk of malware and data compromise in enterprise environments.
- B. Correct.
Correct. Side loading is the installation of applications from outside the official or approved app marketplace, such as directly from a website, third-party store, or manual package file. In a corporate environment, this bypasses normal vetting and increases the chance of installing malicious or tampered applications.
- C. Incorrect.
Incorrect. SIM cloning involves copying subscriber identity information to another SIM for fraudulent carrier access or impersonation. That issue is unrelated to installing apps from an unofficial source or removing OS protections to allow unsigned software.
- D. Incorrect.
Incorrect. NFC pairing is a short-range wireless method used to simplify device pairing or data exchange. It does not disable application signature verification or operating system security controls. This option is a plausible distractor because it involves mobile functionality, but it is not related to app installation trust controls.
- E. Incorrect.
Incorrect. Carrier unlocking removes restrictions that tie a device to a specific mobile carrier, allowing use with other compatible carriers. It does not inherently permit installation of unsigned applications or bypass operating system application security controls. Candidates may confuse carrier restrictions with OS security restrictions, but they are different concepts.