CyberCertPrepMobile Security FundamentalsApp Sandboxing & PermissionsEASYFree question
What is the purpose of Android's 'permission split' introduced with the Camera2 API (e.g., CAMERA vs FLASHLIGHT)?
- A.Camera2 required splitting camera access for legacy compatibility only
- B.Some hardware capabilities were split into narrower permissions to allow apps to declare only what they truly need; FLASHLIGHT (controlling the LED without camera preview) does not require the broader CAMERA permission, implementing the least-privilege principle at a finer granularity
- C.Permission splits allow apps to request partial permissions that expire automatically
- D.The CAMERA permission split is a Play Store policy requirement with no Android OS enforcement
Why B is correct
Android follows least-privilege by offering granular permissions. A flashlight app only needs ACCESS_FLASHLIGHT (normal permission, auto-granted) without needing the full CAMERA permission (dangerous, runtime approval). Similarly, HIGH_SAMPLING_RATE_SENSORS was introduced to gate high-frequency sensor access specifically. Developers should always request the most specific permission that satisfies their use case.
Know someone studying for Mobile Security Fundamentals? Send them this one.