Eccouncil ECSS Exam - Topic 3 Question 83 Discussion

Actual exam question for Eccouncil's ECSS exam

Question #: 83
Topic #: 3

Wesley, a fitness freak, purchased a new Apple smartwatch and synced it with a mobile app downloaded from an unauthorized third party. At the end of the day, when Wesley attempted to access his fitness report from the app, it generated an unusual report and asked for some unnecessary permissions to view it.

Which of the following mobile risks is demonstrated in the above scenario?

AInsecure data storage

BImproper platform usage

CClient code quality

DInsecure authentication

Show Suggested Answer

Suggested Answer: B

by Lisbeth at May 30, 2024, 09:53 AM

Limited Time Offer

25%

Off

Get Premium ECSS Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Bernadine

9 months ago

Really? I’m not sure it’s that clear-cut.

upvoted 0 times

...

Loren

9 months ago

I think it's more about insecure data storage.

upvoted 0 times

...

Dorothy

10 months ago

Wait, why would he sync with a third-party app? That's sketchy.

upvoted 0 times

...

Aleshia

10 months ago

Totally agree, unauthorized apps can be risky!

upvoted 0 times

...

Juliann

10 months ago

Sounds like improper platform usage to me.

upvoted 0 times

...

Oliva

10 months ago

I feel like this could also touch on insecure authentication, especially if the app is asking for unnecessary permissions.

upvoted 0 times

...

Latricia

11 months ago

This reminds me of a practice question we had on client code quality. If the app is poorly coded, it could lead to these issues.

upvoted 0 times

...

Darrin

11 months ago

I'm not entirely sure, but I think it might relate to insecure data storage because of the unusual report generated.

upvoted 0 times

...

Jesse

11 months ago

I remember studying about improper platform usage, especially with third-party apps. This seems to fit since Wesley used an unauthorized app.

upvoted 0 times

...

Brandon

11 months ago

This one's tricky, but I think the clue is in the fact that the app is from an unauthorized source. That means it's not following the platform's guidelines, so I'm going to go with option B, Improper platform usage.

upvoted 0 times

...

Nguyet

11 months ago

I think the key here is the unusual report and the unnecessary permissions. That suggests the app is trying to access more data than it should, which could be a sign of insecure data storage. I'm going to go with option A.

upvoted 0 times

...

Letha

11 months ago

Okay, let's break this down. The app is from an unauthorized source, and it's asking for unnecessary permissions. That sounds like a security risk to me. I'm going to go with option D, Insecure authentication.

upvoted 0 times

...

Sue

11 months ago

Hmm, I'm a bit confused here. The question mentions an unusual report, but it doesn't specify what the risk is. I'm not sure if it's insecure data storage, improper platform usage, or something else. I'll have to think this through carefully.

upvoted 0 times

...

Merissa

11 months ago

This one seems straightforward. The app is from an unauthorized source, and it's asking for unnecessary permissions, so I'm going to go with option B, Improper platform usage.

upvoted 0 times

...

Dorathy

11 months ago

I'm a bit confused on this one. I'll need to re-read the section on the Architecture Repository and the different classification methods used.

upvoted 0 times

...

Floyd

11 months ago

Ah, I see. The issue is that the Share webapp is not properly connected to the Alfresco repository. I think option D, deploying the same version of both war files, is the way to go here.

upvoted 0 times

...

Lon

1 year ago

I'm going with Insecure authentication (D) on this one. Who knows what kind of shady stuff that unauthorized app is trying to pull? Wesley's fitness data is probably safer with the official Apple watch app.

upvoted 0 times

Basilia

1 year ago

C: Wesley should be careful with the permissions he grants to third-party apps.

upvoted 0 times

...

Osvaldo

1 year ago

B: I think it's important to stick with official apps for security.

upvoted 0 times

...

Nell

1 year ago

A: I agree, unauthorized apps can be risky.

upvoted 0 times

...

Myrtie

1 year ago

Client code quality (C) seems like the answer here. That third-party app is probably not well-coded, leading to the weird report and permission requests. Wesley should stick to the official app store from now on.

upvoted 0 times

...

Miles

1 year ago

Haha, Wesley's fitness report must have been pretty 'unusual' if it required special permissions! I'd say the answer is Insecure data storage (A), but maybe he just needs to work on his app-picking skills too.

upvoted 0 times

Emily

1 year ago

D) Insecure authentication

upvoted 0 times

...

Willis

1 year ago

C) Client code quality

upvoted 0 times

...

Ivette

1 year ago

B) Improper platform usage

upvoted 0 times

...

Luisa

1 year ago

A) Insecure data storage

upvoted 0 times

...

Francene

1 year ago

I think the answer is Insecure authentication (D). The app is asking for unnecessary permissions, which could be a way to gain unauthorized access to the user's data.

upvoted 0 times

Hayley

1 year ago

I agree, the app asking for unnecessary permissions seems like a red flag for insecure authentication.

upvoted 0 times

...

Leeann

1 year ago

D) Insecure authentication

upvoted 0 times

...

Shalon

1 year ago

C) Client code quality

upvoted 0 times

...

Erasmo

1 year ago

B) Improper platform usage

upvoted 0 times

...

Alyssa

1 year ago

A) Insecure data storage

upvoted 0 times

...

Page

1 year ago

I believe it could also be Insecure data storage (A) because the app is asking for unnecessary permissions which could compromise Wesley's data.

upvoted 0 times

...

Heidy

1 year ago

I agree with Eva. Syncing a smartwatch with an unauthorized app can lead to improper platform usage.

upvoted 0 times

...

Eva

1 year ago

I think the risk demonstrated here is Improper platform usage (B).

upvoted 0 times

...

Rhea

1 year ago

This is clearly a case of Improper platform usage (B). Downloading an unauthorized app and syncing it with a smartwatch is a security risk that can lead to data breaches and other issues.

upvoted 0 times