Extracting Mobile App Source Code via Reverse Engineering
Jacob works as a system administrator in an organization. He wants to extract the source code of a mobile application and disassemble the application to analyze its design flaws. Using this technique, he wants to fix any bugs in the application, discover underlying vulnerabilities, and improve defense strategies against attacks. What is the technique used by Jacob in the above scenario to improve the security of the mobile application?
Community Votes
100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The question tests whether you can identify reverse engineering from its signature actions (extracting source code, disassembling the binary) and its defensive intent (fixing bugs, discovering vulnerabilities), with the trap being to confuse it with jailbreaking, which merely removes platform restrictions.
Jacob extracts a mobile application's source code and disassembles it to find design flaws, bugs, and vulnerabilities — this is reverse engineering, a legitimate defensive analysis technique. The question establishes that extracting and disassembling an app to understand its inner workings for security hardening is defined as reverse engineering, not sandboxing, jailbreaking, or social engineering.
All 100 voters chose A, and no common wrong-answer pattern is visible in this data. A plausible distractor for unprepared learners is C (Jailbreaking), because jailbreaking is associated with mobile apps and can precede binary analysis — but jailbreaking is only a prerequisite step to gain root access to the filesystem, not the analysis technique itself.
Community Discussion (3 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
A. Reverse engineering is precisely the technique of deconstructing a compiled application to reconstruct its design, logic, and implementation. Jacob's stated actions — extracting the source code and disassembling the mobile application — are the textbook hallmarks of reverse engineering, because a shipped mobile app ships only as a compiled binary (an APK or IPA) that must be unpacked and disassembled with tools such as apktool, jadx, Ghidra, or IDA Pro to recover readable code. The purpose described (analyzing design flaws, fixing bugs, discovering underlying vulnerabilities, and improving defense strategies) is exactly the defensive, security-audit use case that makes reverse engineering a legitimate and widely practiced activity in mobile application security assessment. As the community comment from insaniunt summarizes, reverse engineering "involves the process of analyzing a system, software, or hardware to understand its design, implementation, and functionality."
Why the Other Options Are Wrong
B. App sandboxing is a platform isolation mechanism that confines an application to its own private data container so it cannot access other apps' files; it is a protective control, not a code-extraction or disassembly technique, and it produces no source code for analysis. C. Jailbreaking (iOS) or rooting (Android) removes the vendor's restrictions on a device to gain privileged filesystem access, and while it can be a preliminary step that makes an app's files reachable, it does not itself extract source code or disassemble the application, so it is not the technique being asked about. D. Social engineering manipulates people into divulging credentials or information, and it involves no code analysis whatsoever, making it wholly unrelated to extracting and disassembling an application binary.
Community Comment Notes
The learner responses are unanimous and aligned with this analysis: every vote (100 of 100) selected A, and the two substantive comments agree. insaniunt explained the definition of reverse engineering and tied it directly to Jacob's goal of "gain[ing] insights into its inner workings for security improvement purposes," while LordXander simply confirmed "A - CEHv12 - 2742," pointing to the corresponding CEH v12 module coverage. One commenter, nosavotor, expressed uncertainty about the ethical hacking strategy rather than disputing the answer, so there is no dissenting technical argument to weigh against option A.
Exam Strategy
On CEH terminology questions, anchor on the specific technical verbs in the scenario: "extract the source code" and "disassemble" almost always signal reverse engineering, while "remove platform restrictions" would signal jailbreaking/rooting and "trick a user" would signal social engineering. Read the stated goal too — a defensive intent (fix bugs, find vulnerabilities, harden defenses) does not change the technique's name; reverse engineering remains reverse engineering whether used offensively or defensively.
Frequently Asked Questions
Why is jailbreaking not the technique Jacob is using?
Jailbreaking only removes an iOS device's vendor restrictions to gain root access; it does not extract source code or disassemble the app. Jacob's actions describe code analysis, which is reverse engineering.
Is reverse engineering a mobile application considered illegal?
Not inherently. Reverse engineering for interoperability, bug fixing, and security assessment of apps you own or are authorized to test is widely permitted and is standard practice in mobile application security audits.