CompTIA A+ Core 2 (220-1202)Software TroubleshootingHard
A user installs a simple flashlight app on an Android phone. After installation, the app requests permission to access contacts, camera, microphone, and location. Which security concern does this scenario represent?
- AThe permissions are required by the Android OS for all apps
- BThe device has been jailbroken, causing excessive permission prompts
- CThe app is likely legitimate and requires all permissions to function
- DThe app may be malicious and harvesting data unrelated to its function
Show answer & explanationAnswer & explanation
Correct answer: D. The app may be malicious and harvesting data unrelated to its function
A flashlight app has no functional need for contacts, camera, microphone, or location access. Requesting permissions unrelated to the app's stated purpose is a common red flag for malicious or data-harvesting apps and should prompt the user to deny permissions or uninstall the app.
Why the other options are wrong
- A. Android does not mandate these permissions for every app; they are requested by the app itself.
- B. Jailbreaking is an iOS term, and nothing indicates the device is jailbroken.
- C. A flashlight has no legitimate need for these permissions, so this claim is false.
Excessive App Permissions
A mobile security red flag where an app requests permissions unrelated to its stated function, suggesting possible data harvesting or malicious intent.
- Compare requested permissions to the app's actual purpose
- Deny unrelated permissions or avoid installing the app
- Common tactic used by malicious/spyware apps disguised as simple utilities
Memory trick: Flashlight app asking for your contacts? Red flag flashing brightly