Mobile App MitM Prevention via Encryption

312-50v12 By islever Editorial Last updated

Hacking Mobile Platforms

Short answer

C The feature should prevent the app from connecting to any unencrypted Wi-Fi networks to ensure data confidentiality during transmission.

Question

As the chief security officer at SecureMobile, you are overseeing the development of a mobile banking application. You are aware of the potential risks of man-in-the-middle (MitM) attacks where an attacker might intercept communication between the app and the bank's servers. Recently, you have learned about a technique used by attackers where they use rogue Wi-Fi hotspots to conduct MitM attacks. To prevent this type of attack, you plan to implement a security feature in the mobile app. What should this feature accomplish?
  1. It should require two-factor authentication for user logins.
  2. It should prevent the app from communicating over a network if it detects a rogue access point.
  3. It should prevent the app from connecting to any unencrypted Wi-Fi networks. Correct Answer
  4. It should require users to change their password every 30 days.

Key Takeaways

The core concept tested is how application-level security controls mitigate network-layer threats, specifically identifying that enforcing encryption prevents data interception even if the underlying network is compromised.

This question addresses Man-in-the-Middle (MitM) attack prevention in mobile banking applications by enforcing network encryption standards. It establishes that requiring encrypted connections is the primary defense against interception on public or rogue Wi-Fi networks.

Common mistake: Many candidates incorrectly choose Option B, believing the app should detect and block rogue access points. However, standard mobile operating systems and apps generally lack the capability to reliably distinguish between legitimate and rogue APs based solely on SSID or signal strength, making this an impractical requirement for a general feature.

Expert Analysis

Why the Answer Is Correct

Correct answer: C — The feature must prevent the app from connecting to any unencrypted Wi-Fi networks. By enforcing encryption (such as TLS/SSL), the application ensures that data transmitted over the network is protected from eavesdropping, regardless of whether the user is on a rogue hotspot or a legitimate but insecure network. This is the most reliable and standard method for mitigating MitM risks at the application layer.

Why the Other Options Are Wrong

Option A (Two-factor authentication) secures the account but does not protect the confidentiality of data in transit. Option B (Detecting rogue APs) is technically flawed because apps cannot reliably identify rogue APs; attackers can clone SSIDs and credentials, making detection nearly impossible without advanced enterprise-grade solutions not implied here. Option D (Password rotation) is a policy control unrelated to network security or traffic interception.

Community Comment Notes

Community consensus heavily favors Option C, with users noting that preventing connections to open/unencrypted networks is the practical way to stop MitM attacks on Wi-Fi. Some dissenting voices argue for Option B, claiming that detecting rogue APs is necessary, but this is often rebutted by the fact that apps cannot inherently trust the network infrastructure's identity without cryptographic verification. One commenter noted, "The app itself can not detect a rouge AP but can force an encryption to run," highlighting the technical limitation of Option B.

Exam Strategy

When dealing with MitM questions, always look for encryption (TLS, SSL, IPsec) as the primary defense. Distinguish between authentication (who you are) and confidentiality (keeping data secret); encryption provides the latter.

Frequently Asked Questions

Why can't the app just detect rogue Wi-Fi hotspots?

Apps cannot reliably distinguish rogue APs from legitimate ones because attackers can mimic SSIDs and passwords. Encryption is the only consistent protection.

Does two-factor authentication stop MitM attacks?

No. 2FA secures login credentials but does not encrypt the data stream. An attacker can still intercept sensitive information sent after login.

More 312-50v12 FAQ →

Community Votes

C
100%

100% of anonymous learners picked answer C. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 8 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 8

  1. Spam_Protection 👍 7 Answered C
    This question sucks. If the mobile banking app used TLS or IPSEC who ever controlled the network wouldn't matter. Poor questions like this make me question the validity of the material between 126 and 249.
  2. brrbrr 👍 1 Answered C
    C - This feature helps protect against MitM attacks by ensuring that the mobile app only communicates over encrypted Wi-Fi networks. Unencrypted Wi-Fi networks are more susceptible to interception, making it easier for attackers to perform MitM attacks. By enforcing the use of encrypted Wi-Fi connections, the app enhances the security of data in transit, reducing the risk of unauthorized interception and tampering.
  3. ryotan 👍 1 Answered B
    B Only preventing the app from connecting to any unencrypted wi-fi does not help. You need a feature to detect a rogue AP. An easy example is the legit wifi uses SSID aaa password bbb The rogue AP is setup with the same SSID and PW can make MitM possible.
  4. athicalacker 👍 1 Answered B
    Option B. This feature helps ensure that the app only communicates over trusted and secure networks, mitigating the risk of interception and manipulation of sensitive data by attackers operating rogue Wi-Fi hotspots.
  5. qtygbapjpesdayazko 👍 1 Answered C
    The pratical way to detect this is to prevent open SSIDs. Keyword "rogue Wi-Fi hotspots to conduct MitM attacks".
Show 3 more comments
  1. calx5 👍 1 Answered C
    The question mentioned that Wi-Fi hotspots conduct MitM attacks. MitM should be an unencrypted network.
  2. qtygbapjpesdayazko 👍 1 Answered C
    C. It should prevent the app from connecting to any unencrypted Wi-Fi networks.
  3. 49f4430 👍 1 Answered C
    C The app itself can not detect a rouge AP but can force an encryption to run

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Comprehensive Network Scanning Sequence

S-grade

NetBIOS Enumeration on IPv6 Networks

S-grade

Ethical Hacker Liability and Organizational Risk Acceptance

S-grade

Least Likely Social Engineering Method Based on Footprinting Data

S-grade

← Back to 312-50v12 Study Guide