100+ Free PMPA Practice Questions
Prepare for the TCM Practical Mobile Pentest Associate (PMPA) exam with instant access — no signup required.
Loading practice questions...
Explore More TCM Security Practical Certifications
Continue into nearby exams from the same family. Each card keeps practice questions, study guides, flashcards, videos, and articles in one place.
Key Facts: PMPA Exam
Practical
Exam Format
TCM Security
2 days
Assessment Period
TCM Security
Android
Exam Focus Platform
TCM Security
No Flags
Exam Style
TCM Security
Report Required
Deliverable
TCM Security
Associate
Certification Level
TCM Security
The PMPA from TCM Security is an Android-focused practical mobile application penetration testing certification. Candidates have 2 days to assess a mobile app environment and additional days to submit a professional report — no flags, no MCQs. The exam tests real-world skills: APK decompilation, AndroidManifest.xml analysis, MobSF scanning, Frida/Objection SSL pinning bypass, Burp Suite proxy interception, insecure storage enumeration, and exported component exploitation. Preparation is through TCM Security's Mobile Application Penetration Testing (MAPT) course. This practice test covers the theoretical knowledge — the real exam requires hands-on assessment.
Sample PMPA Practice Questions
Try these sample questions to test your PMPA exam readiness. Each question includes a detailed explanation. Start the interactive quiz above for the full 100+ question experience with AI tutoring.
1What is the file extension of an Android application package that you download and install on a device?
2Which file inside an APK declares the app's components, permissions, and minimum SDK version?
3When decompiling an APK with apktool, which command correctly decodes the APK named 'target.apk' into a folder called 'output'?
4Which tool decompiles Android APKs into readable Java source code and provides a GUI for browsing classes, methods, and strings?
5In AndroidManifest.xml, which attribute on a component makes it accessible to other apps and the system outside the declaring application?
6A pentester runs `adb shell am start -n com.example.app/.AdminActivity` successfully without authentication. What vulnerability does this demonstrate?
7MobSF (Mobile Security Framework) is used in mobile pentesting primarily for which purpose?
8When pulling an APK from a running Android emulator via ADB, which command saves the installed APK of the package 'com.example.app' to the local machine?
9Hardcoded strings in an Android app's resources can be found in which file?
10During static analysis, you discover a Firebase URL in strings.xml: `https://myapp-default-rtdb.firebaseio.com`. What is the simplest method to check if the database is publicly readable?
About the PMPA Exam
The PMPA (Practical Mobile Pentest Associate) is TCM Security's associate-level Android-focused mobile application penetration testing certification. Unlike multiple-choice exams, the PMPA requires candidates to conduct a real-world mobile app security assessment over 2 days, then write a professional pentest report. This practice bank tests the theoretical knowledge underlying the practical exam: Android architecture, static analysis tools (apktool, jadx, MobSF), dynamic analysis techniques (Frida, Objection, Burp Suite), SSL pinning bypass, insecure data storage, and exported component vulnerabilities.
Assessment
Performance-based assessment
Time Limit
2 days assessment + additional days for report writing
Passing Score
Not publicly specified
Exam Fee
Exam voucher — see certifications.tcm-sec.com/pmpa/ for current pricing (TCM Security)
PMPA Exam Content Outline
Mobile Pentest Methodology & Lab Setup
Penetration testing process, rules of engagement, Android emulator (AVD) configuration, ADB command fundamentals, Burp Suite proxy setup, APK acquisition, and Frida server deployment
Android Architecture & APK Structure
APK file format and contents, AndroidManifest.xml components (Activity, Service, Receiver, Provider), Dalvik/ART runtime, smali bytecode, Android security model and sandbox, IPC and Intent system
Static Analysis
APK decompilation with apktool and jadx-gui, manifest attack surface (exported components, dangerous permissions, allowBackup, debuggable), hardcoded secrets (API keys, Firebase URLs, AWS credentials), and MobSF automated scanning
Dynamic Analysis & Traffic Interception
Burp Suite Android proxy configuration, SSL pinning bypass with Objection (android sslpinning disable) and Frida Codeshare scripts, runtime method hooking with Frida Java.use(), logcat analysis, Drozer component testing, and API traffic testing for IDOR and authentication flaws
Insecure Data Storage & Sensitive Data Exposure
SharedPreferences file analysis, SQLite database extraction, external storage review, Firebase database misconfiguration (/.json endpoint testing), AWS S3 bucket enumeration, insecure logging via logcat
Reporting & Remediation
Professional mobile pentest report structure and sections, CVSS-informed risk rating, vulnerability evidence documentation, remediation recommendations, and executive summary writing
How to Pass the PMPA Exam
What You Need to Know
- Passing score: Not publicly specified
- Assessment: Performance-based assessment
- Time limit: 2 days assessment + additional days for report writing
- Exam fee: Exam voucher — see certifications.tcm-sec.com/pmpa/ for current pricing
Keys to Passing
- Work through all 100 available questions
- Review every answer and explanation
- Track weak areas and revisit them
- Use our AI tutor for tough concepts
PMPA Study Tips from Top Performers
Frequently Asked Questions
What is the PMPA exam format?
The PMPA (Practical Mobile Pentest Associate) is a fully practical exam with no multiple-choice questions and no flags to capture. Candidates are given 2 full days to perform an Android mobile application penetration test against provided targets. After the assessment period, candidates have additional days to write and submit a professional pentest report. The evaluation is based on the quality of findings identified and the professionalism of the report.
What topics does the PMPA cover?
The PMPA covers the complete mobile app pentest workflow focused on Android: (1) Lab setup — Android emulator, ADB, Burp proxy configuration; (2) Static analysis — APK decompilation with apktool/jadx, AndroidManifest.xml review, MobSF scanning, hardcoded secrets; (3) Dynamic analysis — Frida/Objection SSL pinning bypass, runtime instrumentation, logcat analysis; (4) Insecure storage — SharedPreferences, SQLite, Firebase, AWS S3; (5) Exported component testing — Activities, Services, Receivers, ContentProviders; and (6) Professional report writing.
What tools do I need to know for the PMPA?
Core tools for PMPA preparation: ADB (Android Debug Bridge) for device communication and file operations; apktool for APK decompilation to smali and manifest; jadx-gui for decompilation to readable Java source; MobSF (Mobile Security Framework) for automated static and dynamic analysis; Frida for dynamic instrumentation and Java method hooking; Objection for Frida-powered SSL pinning bypass, root detection bypass, and file enumeration; Burp Suite for HTTP/HTTPS traffic interception and API testing; and Drozer for exported component enumeration and testing.
How do I prepare for the PMPA?
Complete TCM Security's Mobile Application Penetration Testing (MAPT) course. Set up an Android Studio AVD (x86_64, no Google Play Store for easy root), practice with InjuredAndroid as a vulnerable target, configure Burp Suite proxy on the emulator, deploy Frida server and practice Objection SSL pinning bypass, analyze APKs with jadx for hardcoded secrets, and test Firebase/AWS misconfigurations. Review OWASP Mobile Top 10 and MASVS for vulnerability taxonomy and write mock pentest reports.
Is the PMPA suitable for beginners?
The PMPA is an associate-level certification designed for candidates with some penetration testing background. TCM Security states prior mobile app hacking experience is not required, but recommends familiarity with network penetration and computer systems. Candidates who have completed TCM's Practical Ethical Hacking (PEH) course or similar foundational material will be well-positioned to tackle the PMPA content.
Is this practice test like the real PMPA?
No — this is a multiple-choice knowledge-preparation bank. The real PMPA is a fully practical hands-on exam where you must actually conduct an Android mobile app penetration test. These questions test the conceptual and technical knowledge underlying practical skills: how tools work, why vulnerabilities exist, what commands achieve specific results, and what mitigations apply. Use this bank to solidify theoretical knowledge, then practice hands-on exploitation with InjuredAndroid, DIVA, and other vulnerable apps.