Android Security Essentials (AND-802) Practice Exam

Android Security Essentials (AND-802) Practice Exam

The Android Security Essentials (AND-802) certification validates your understanding of fundamental security principles and practices specific to the Android operating system.

Who Should Take This Exam?

This certification is ideal for various IT professionals involved in the Android ecosystem:

• Android Developers (Security Focus): Those seeking to enhance their development skills by incorporating strong security practices into their Android applications.
• Mobile Security Specialists: Individuals specializing in mobile security who want to gain a deeper understanding of Android security mechanisms and threats.
• IT Security Professionals: Expanding their knowledge into mobile security by focusing on the Android platform, a widely used mobile operating system.
• QA Testers (Mobile Focus): Quality Assurance testers focusing on mobile applications, specifically those who want to include security testing practices within their skillset.

Prerequisites

There are no formal prerequisites for taking the AND-802 exam. However, a basic understanding of Android development concepts and general IT security principles would be beneficial.

Roles and Responsibilities 

• Secure Android Developer: Developing secure and robust Android applications by implementing best practices and secure coding principles.
• Mobile Security Analyst (Android): Specializing in identifying and addressing security vulnerabilities within Android applications and the platform itself.
• Android Security Tester: Conducting security testing on Android applications to ensure they adhere to security standards and mitigate potential risks.

Exam Details 

• Number of Questions: 45
• Length of Time:  90 Minutes
• Passing score: 70%
• Exam Language: English and Spanish
• Exam format: Multiple-choice 

Course Structure

The Android Security Essentials (AND-802) Exam covers the following topics - 

1. Permissions

• Android Platform Architecture
• Android Security Architecture
• Permissions

2. Managing the Policy File

• The Manifest File
• Modifying the Application Policy

3. Users’ Data Privacy and Protection

• Data Security Principles
• The Mobile Environment
• Data States
• Vulnerabilities and Attacks Against Stored Data
• Protection Principles
• Tips for Android Coding Vulnerabilities

4. Securing Storage

• Data Storage Decisions
• Storage Mechanisms
• File Operations on an External Storage
• Cache
• Database