Feedback keeps a question bank alive, and PassSureExam collects it constantly from AND-402 candidates, running regular reviews of the Android Security Essentials material so that what you study reflects the exam as it is, not as it was.
Android AND-402 Exam Overview:
| Certification Vendor: | AndroidATC |
|---|---|
| Exam Name: | Android Security Essentials |
| Exam Number: | AND-402 |
| Passing Score: | 70% |
| Available Languages: | Spanish, English |
| Exam Price: | 150 USD |
| Related Certifications: | Android Certified Application Engineer |
| Real Exam Qty: | 45 |
| Exam Format: | Multiple Choice Questions |
| Exam Duration: | 90 minutes |
| Sample Questions: | ![]() |
| Exam Way: | Onsite or online proctored |
| Pre Condition: | Basic Android application development knowledge recommended |
| Official Syllabus URL: | https://androidatc.com/pages-4/Eng/Android-Certifications-and-Exams |
Android AND-402 Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| Topic 1: Threats & Vulnerability Mitigation | - Defensive Coding Practices - Malware & Exploits |
| Topic 2: Android Security Architecture | - Application Isolation - Linux Kernel Security & Sandbox - Security-Enhanced Linux (SELinux) |
| Topic 3: Permission & Access Control | - Runtime Permission Requests - Permission Categories (Normal, Dangerous, Signature) |
| Topic 4: Network & Communication Security | - Secure Network Connections - Encrypted APIs |
| Topic 5: Secure Data Management | - Cryptographic Techniques - Secure Storage Practices |
| Topic 6: Inter-Process Communication Security | - Content Providers & Broadcasts - Secure IPC Mechanisms |
What to Know About AND-402 Before You Start
- Inter-Process Communication Security ()
- Network & Communication Security ()
- Permission & Access Control ()
Android Security Essentials Sample Questions:
If credit card numbers and passwords are stored in device they should to be in
- A. Hash Form
- B. Raw Form
- C. Encrypted Form
- D. Text file
Correct Answer: A 🗳️
Which Protocol is used to ensure data integrity in Android?
- A. Real-time Transport Protocol (RTP)
- B. Secure Socket Layer (SSL)
- C. Transfer Control Protocol (TCP)
- D. Internet Protocol (IP)
Correct Answer: B 🗳️
Which of the following is NOT required for backing up data on cloud storage?
- A. The backupAgent agent should be specified in application tag inside AndroidManifest.xml.
- B. The internet permission in the AndroidManifest file to communicate with the Google server.
- C. The class(backup agent) that extends BackupAgentHelper.
- D. The application should be registered with the Google's backup service.
Correct Answer: B 🗳️
Which of the following is true about "uiOptions" attribute of the <application>? (Choose two)
- A. Its default value is "none".
- B. "hideActionBarWhenNarrow" is a valid value for this attribute.
- C. "splitActionBarWhenNarrow" is a valid value for this attribute.
- D. It disables any other UI options in the layout resource files.
Correct Answer: A,C 🗳️
Dangerous Permissions can cause real harm or damage to user's Personal___________.
- A. Money
- B. Data
- C. Device
- D. All choices are correct.
Correct Answer: D 🗳️



