A user's SIM card is protected by a SIM PIN. The phone is stolen and the thief removes the SIM and inserts it into another phone. What does the SIM PIN protect against in this scenario?
- A.A. The SIM PIN prevents the cellular carrier from porting the number to a new SIM without authorization
- B.D. The SIM PIN activates remote wipe on the original device when an incorrect PIN is entered on another device
- C.C. The SIM PIN encrypts all SMS messages stored on the SIM card
- D.B. The SIM PIN prevents the SIM card from functioning in any device until the correct PIN is entered, blocking the attacker from making calls, sending SMS (including SIM-swap verification texts), or using the subscriber's mobile data on a different device
Why D is correct
A SIM PIN locks the SIM card itself. When inserted into any device, the SIM will not connect to the network until the PIN is entered (typically 4-8 digits). This prevents a thief who steals or finds a SIM from using the subscriber's cellular identity to make calls, receive SMS (including 2FA codes sent to that number), or use mobile data. SIM PIN does not address carrier-side SIM port-out attacks. SMS storage encryption is separate. SIM PIN does not trigger remote wipe on any device.
Know someone studying for Mobile Security Fundamentals? Send them this one.