CyberCertPrepMobile Security FundamentalsMobile Security BasicsEASYFree question
What does it mean when a mobile device reaches 'End of Life' (EOL) from its OS vendor, and what security risk does this create?
- A.EOL means the device can no longer make calls; security patches continue
- B.EOL means the vendor no longer releases security patches for that OS version/device; users continue operating with unpatched vulnerabilities that attackers can exploit indefinitely, as known CVEs accumulate without fixes
- C.EOL only affects app compatibility; the OS itself remains secure
- D.EOL devices automatically update to a minimal security maintenance mode
Why B is correct
iOS EOL (Apple stops signing older iOS): approximately 5-6 years per device. Android EOL varies by OEM: Pixel 8 gets 7 years; many budget devices get 2 years. After EOL, every published CVE for that OS version is permanently exploitable. Enterprise security policies (e.g., CIS benchmarks, NIST 800-124) mandate not allowing EOL devices access to corporate resources. MDM conditional access can enforce minimum OS version requirements.
Know someone studying for Mobile Security Fundamentals? Send them this one.