Exam CISSP topic 1 question 409 discussion

The most critical measure in order to safeguard from a malware attack on a smartphone is to prevent jailbreaking or rooting. Jailbreaking or rooting is the process of removing the manufacturer’s or carrier’s restrictions on a smartphone, which allows the user to install unauthorized apps or modify the system settings. However, this also removes a lot of the built-in security features of the smartphone, such as encryption, sandboxing, and app verification, and exposes the device to malware infections and attacks. Therefore, it is advisable to avoid jailbreaking or rooting your smartphone and to download apps only from reputable sources.

Just not rooting your phone only mitigates some attacks. ChatGPT is wrong here and people should stop posting its responses if you don’t have any idea what you’re talking about.

You don't have to jailbreak a cell phone to download and install applications only to change the OS or if you buy a verizon phone you have to jailbreak it to use another carrier. Regardless of what OS or apps you install on a phone, installing an antivirus will provide it from malware. B. Install antivirus will protect it whether it's default install or if you jailbreak it

Most critical: Prevent jailbreak Most effective: Antivius What is worst? jailbreaking or not installing antivirus? Jailbreaking is worst

D. Preventing Jailbreaking or Rooting: Jailbreaking (for iOS) or rooting (for Android) is the process of removing software restrictions imposed by the device's operating system. While this can offer additional flexibility and customization, it also opens up the device to security risks. Malware is more likely to infect a jailbroken or rooted device because it has bypassed built-in security mechanisms. Therefore, preventing users from jailbreaking or rooting their devices is a fundamental step in smartphone security.

B more important than D between AV and prevent rooting/jailbreak, I prefer using AV whether jailbreak or not

The question is asking for most critical. Anti-virus might not get all malware anyway, so it's ok but not a full solution. Not rooting is critical, because once you root the phone you have zero protection. "Some apps might contain malware and steal your sensitive data like login details, passwords or even payment details. Others might even grant hackers complete access to your phone. If you do root your phone, the least you should do is use a good antivirus and a VPN for Android" https://nordvpn.com/blog/why-you-shouldnt-root-android/

I mean: I would go for D.

It is debatable. I would go for B, because CISSP OSG stated that it consequently uses the word anti-malware, instead of anti-virus. Therefore I think anti-virus program is too narrow of a concept.

I would say D is the most important. ChatGPT agrees

B is correct. Malware attacks can come from various sources such as downloading malicious apps or visiting infected websites and an antivirus can help detect and remove malware that may be present on the device. So installing an antivirus is the most critical measure to safeguard a smartphone from malware attacks. Preventing jailbreaking or rooting can help prevent unauthorized access to the smartphone, they do not necessarily protect the smartphone from malware attacks.