A mobile forensics analyst is examining an iPhone for signs of iOS configuration profile abuse. Where in the iOS Settings app should the analyst look to enumerate all installed configuration profiles?
- A.A. Settings > Privacy & Security > Configuration Profiles
- B.D. Settings > [Apple ID] > iCloud > Device Management
- C.C. Settings > Screen Time > Content & Privacy > Installed Profiles
- D.B. Settings > General > VPN & Device Management
Why D is correct
On iOS, all installed configuration profiles (including MDM enrollment profiles, certificate profiles, and malicious profiles) are visible under Settings > General > VPN & Device Management (the exact label may vary slightly by iOS version, but has previously been 'Profiles & Device Management'). This is the correct location for forensic enumeration of profiles. The other menu paths do not lead to a complete profile inventory.
Know someone studying for Mobile Security Fundamentals? Send them this one.