CompTIA A+ Core 2 (220-1202)Software TroubleshootingHard
A user's iPhone suddenly starts exhibiting unusual behavior: new apps appear on the home screen without installation, persistent pop-ups advertise unwanted services, and the default search engine in Safari changes frequently. The user confirms they have NOT jailbroken the device. Which of the following is the MOST likely cause?
- AA rogue VPN profile has been installed.
- BThe iPhone has been infected with a virus.
- CThe device has been remotely accessed by an attacker.
- DA malicious configuration profile has been installed.
Show answer & explanationAnswer & explanation
Correct answer: D. A malicious configuration profile has been installed.
On iOS, malicious configuration profiles are a common method for attackers to gain control over device settings, such as installing unwanted apps, changing search engines, or redirecting traffic, without requiring a jailbreak. iOS is highly resistant to traditional viruses, making a malicious configuration profile a more plausible explanation for these specific symptoms.
Why the other options are wrong
- A. A rogue VPN profile could redirect internet traffic but would not typically install new apps or change the default search engine persistently in this manner.
- B. Traditional viruses are extremely rare on un-jailbroken iOS devices due to Apple's strict app sandboxing and review processes. While malware exists, a 'virus' is less likely than a configuration profile.
- C. While remote access could cause some of these symptoms, the specific combination of new apps and persistent browser changes points more specifically to the capabilities of a configuration profile rather than general remote access.
Malicious iOS Configuration Profiles
Malicious configuration profiles on iOS devices can alter system settings, install unwanted apps, change network configurations, and redirect traffic without requiring a jailbreak.
- Often installed via phishing links or untrusted websites.
- Can be found and removed in Settings > General > VPN & Device Management.
- Used to push advertisements, change search engines, or route traffic through proxies.
Memory trick: iPhone behaving badly? Check profiles, not just apps, lad!