Android security interview questions
Keystore, secure storage, biometrics, network security, exported components, WebView, secrets and Play Integrity.
– interview-ready · 9 questions in this topic
– of 9 tried
Saved on this device. Interview-ready means you got it right on two different days. Guesses and hints count for less.
Questions
- Storing tokens and secrets on devicePick the fix
- Android KeystoreFill the blank
- Biometric authenticationPick the fix
- Network security config and pinningPick the fix
- Exported components and intent safetySpot the bug
- WebView securityPick the fix
- API keys and secrets in the APKPick the fix
- Play Integrity APIOrder the steps
- Least privilege and privacy APIsPick the fix
Practise this topic
Flashcards · 13
Flip, then say if you knew it. Needs JavaScript; every answer is also on its question page.
Quick quiz · 9 questions
One exercise per question, checked as you go. Needs JavaScript.
Mock interview · 1 set
Timed, out loud, then tick what you covered. Needs JavaScript.
Fix this PR · 1 review
Review a diff like a senior: flag the lines you'd comment on. Needs JavaScript.
Quick facts
Recall the answer first, then tap Show to check.
StrongBox
StrongBox is a Keystore backed by a separate secure chip, available on some devices since Android 9.
Cleartext default
Apps targeting API 28 or higher block cleartext HTTP by default.
User CAs
Apps targeting API 24 or higher don't trust user-installed certificate authorities by default.
SafetyNet
The SafetyNet Attestation API was shut down; Play Integrity replaced it.
Printable cheat sheet · Review your weak spots in this topic
Share your progress
Sources: Question outline adapted from Android-Interview-Questions by Mohsen Mirhoseini, licensed under Apache 2.0. We reorganised the questions, rewrote every answer and added new ones. Credits and license