CISSP Exam QuestionsBrowse all questions from this exam

CISSP Exam - Question 409


Which of the following measures is the MOST critical in order to safeguard from a malware attack on a smartphone?

Show Answer
Correct Answer: D

To safeguard a smartphone from a malware attack, preventing jailbreaking or rooting is the most critical measure. Jailbreaking or rooting a device removes built-in security features such as encryption, sandboxing, and app verification, making the device significantly more vulnerable to malware infections. These security features are essential for maintaining the integrity of the smartphone's operating system and protecting it from malicious software. Once a device is jailbroken or rooted, it becomes much easier for malware to bypass any additional safeguards like antivirus software, rendering them less effective. Therefore, avoiding the removal of these security measures is fundamental to maintaining robust protection against malware.

Discussion

12 comments
Sign in to comment
l00tOption: D
Aug 13, 2023

The most critical measure in order to safeguard from a malware attack on a smartphone is to prevent jailbreaking or rooting. Jailbreaking or rooting is the process of removing the manufacturer’s or carrier’s restrictions on a smartphone, which allows the user to install unauthorized apps or modify the system settings. However, this also removes a lot of the built-in security features of the smartphone, such as encryption, sandboxing, and app verification, and exposes the device to malware infections and attacks. Therefore, it is advisable to avoid jailbreaking or rooting your smartphone and to download apps only from reputable sources.

klarakOption: B
Nov 6, 2024

Just not rooting your phone only mitigates some attacks. ChatGPT is wrong here and people should stop posting its responses if you don’t have any idea what you’re talking about.

Rollingalx
Aug 25, 2023

B is correct. Malware attacks can come from various sources such as downloading malicious apps or visiting infected websites and an antivirus can help detect and remove malware that may be present on the device. So installing an antivirus is the most critical measure to safeguard a smartphone from malware attacks. Preventing jailbreaking or rooting can help prevent unauthorized access to the smartphone, they do not necessarily protect the smartphone from malware attacks.

GoseuOption: D
Oct 3, 2023

I would say D is the most important. ChatGPT agrees

[Removed]Option: D
Oct 5, 2023

It is debatable. I would go for B, because CISSP OSG stated that it consequently uses the word anti-malware, instead of anti-virus. Therefore I think anti-virus program is too narrow of a concept.

HughJassole
Dec 12, 2023

The question is asking for most critical. Anti-virus might not get all malware anyway, so it's ok but not a full solution. Not rooting is critical, because once you root the phone you have zero protection. "Some apps might contain malware and steal your sensitive data like login details, passwords or even payment details. Others might even grant hackers complete access to your phone. If you do root your phone, the least you should do is use a good antivirus and a VPN for Android" https://nordvpn.com/blog/why-you-shouldnt-root-android/

GuardianAngel
Aug 9, 2024

You don't have to jailbreak a cell phone to download and install applications only to change the OS or if you buy a verizon phone you have to jailbreak it to use another carrier. Regardless of what OS or apps you install on a phone, installing an antivirus will provide it from malware. B. Install antivirus will protect it whether it's default install or if you jailbreak it

[Removed]
Oct 5, 2023

I mean: I would go for D.

jackdryan
Nov 15, 2023

D is correct

thanhlbOption: B
Apr 19, 2024

B more important than D between AV and prevent rooting/jailbreak, I prefer using AV whether jailbreak or not

Soleandheel
Jun 17, 2024

D. Preventing Jailbreaking or Rooting: Jailbreaking (for iOS) or rooting (for Android) is the process of removing software restrictions imposed by the device's operating system. While this can offer additional flexibility and customization, it also opens up the device to security risks. Malware is more likely to infect a jailbroken or rooted device because it has bypassed built-in security mechanisms. Therefore, preventing users from jailbreaking or rooting their devices is a fundamental step in smartphone security.

gjimenezfOption: D
Aug 2, 2024

Most critical: Prevent jailbreak Most effective: Antivius What is worst? jailbreaking or not installing antivirus? Jailbreaking is worst

cysec_4_lyfeOption: D
Mar 30, 2025

Jailbreaking or rooting opens the floodgates for malware.