During a security assessment of a corporate Android device fleet, one device boots with a red-orange AVB warning screen. The engineer investigates to determine whether this is a concern.
A security engineer testing an Android device notices the device shows a red-orange warning screen at boot saying 'Your device is corrupt. It can no longer be trusted.' What does this indicate?
- A.B) The red/orange screen is a normal startup screen on some Android OEM devices; it is a manufacturer design choice and has no security significance.
- B.A) The red/orange warning screen means the device failed Android Verified Boot (AVB) verification - a system partition hash did not match the expected value stored in the verified boot metadata, indicating the system image has been modified outside of an official signed OTA. This could mean: the OEM-signed boot image was tampered with, an unauthorized OS was flashed, or storage corruption occurred. On a corporate device this is a serious security concern requiring immediate quarantine and investigation.