What is Android's 'StrictMode' and how is it useful as a security tool during development?
- A.StrictMode is a Play Store pre-submission scanner that checks an uploaded APK against the OWASP Mobile Top 10, and the report lands in the Play Console before the release is promoted to production
- B.StrictMode detects policy violations at runtime - including cleartext HTTP traffic, unencrypted disk operations, and leaked open resources - and can crash the app or log a stack trace, allowing developers to catch data exposure bugs before production
- C.StrictMode is a platform security mode that blocks an app from touching external storage, and it forces file operations through the internal sandbox for the life of the debug process
- D.StrictMode is an SELinux policy tool that layers extra mandatory access control rules onto a development build, and the rules simulate the tighter production domain before shipping
Why B is correct