🌍 Mobile App Development · subject
Mobile App Development Release and Operations Syllabus
The Release and Operations syllabus for Mobile App Development in full: 5 chapters and 17 topics, every one listed below, plus 51 Release and Operations flashcards with answers.
Release and Operations syllabus: all 5 chapters
Expand any chapter to see its topics and sub-topics.
-
Build and Signing
3 topics- iOS Provisioning and Certificates
- Android Keystores and Signing
- Build Variants and Flavors
-
CI/CD for Mobile
3 topics- Automated Builds
- Automated Testing Pipelines
- Beta Distribution
-
App Store Deployment
4 topics- App Store Connect Submission
- Google Play Console Submission
- App Review Guidelines
- Store Listing and ASO
-
Monitoring and Maintenance
4 topics- Crash Reporting
- Analytics and User Behavior
- Feature Flags and Remote Config
- Over-the-Air Updates
-
Monetization and Growth
3 topics- Subscription and IAP Models
- In-App Advertising
- Push Engagement and Retention
Mobile App Development Release and Operations flashcards — 51 questions with answers
In iOS code signing, what is the difference between a Development and a Distribution certificate?
A Development certificate lets you run and debug apps on registered test devices; a Distribution certificate is used to sign apps for release to the App Store or for enterprise/ad-hoc distribution. Both are issued by Apple and tie the build to your team identity.
What are the four components required to build an iOS provisioning profile?
(1) An App ID (bundle identifier), (2) a signing certificate (development or distribution), (3) a list of registered device UDIDs (for development/ad-hoc), and (4) the entitlements/capabilities. Apple bundles these into a .mobileprovision file.
What is the purpose of an Apple provisioning profile?
It links a specific App ID, signing certificate, and set of authorized devices so that iOS can verify an app is authorized to run and which entitlements it may use. It is embedded in the app bundle at build time.
Distinguish the three iOS distribution provisioning profile types.
App Store (submit to App Store, no device list), Ad Hoc (install on up to 100 registered devices per type without the store), and Enterprise/In-House (internal distribution via Apple Developer Enterprise Program, no store).
What is an Apple App ID's difference between an Explicit and a Wildcard App ID?
An Explicit App ID matches exactly one bundle identifier (e.g. com.acme.app) and is required for capabilities like Push Notifications or In-App Purchase. A Wildcard App ID (com.acme.*) matches many bundle IDs but cannot use most entitlements.
In Android app signing, what is a keystore and what does it contain?
A keystore is a binary file (typically .jks or .keystore) that securely stores one or more cryptographic key pairs (private key + certificate). Each key is protected by the keystore password and its own key alias/password, and is used to sign APKs/AABs.
What is the difference between the upload key and the app signing key under Google Play App Signing?
The upload key is what you use to sign the artifact you upload to Play; Google verifies it, strips it, and re-signs the app with the app signing key it holds. If your upload key is lost you can reset it, but the app signing key stays constant so users can always update.
Compare Android's APK signing scheme v1, v2, and v3.
v1 (JAR signing) signs individual files, is slow and vulnerable to some tampering; v2 signs the whole APK as a block for integrity and faster verification (Android 7.0+); v3 adds key rotation support (Android 9.0+). v4 (Android 11+) adds incremental/streaming install signatures.
What is a build flavor (Android) or scheme/configuration (iOS), and give a typical use.
A build variant mechanism that produces different versions of an app from one codebase, e.g. free vs paid, or dev/staging/prod, each with its own application ID, resources, API endpoints, and signing config.
In Android Gradle, how does a build variant relate to build types and product flavors?
A build variant is the cross-product of a build type (e.g. debug, release) and a product flavor (e.g. free, paid). Flavors × types = variants, so 2 flavors × 2 types yields 4 variants (freeDebug, freeRelease, paidDebug, paidRelease).
Why should debug and release build types typically use different application IDs or suffixes?
Using an applicationIdSuffix (e.g. .debug) lets debug and release builds be installed side-by-side on one device and keeps analytics, crash reports, and backend data for test builds separate from production.
What is Continuous Integration (CI) in the context of mobile automated builds?
CI is the practice of automatically building and testing every code change pushed to the repository, giving fast feedback that the code compiles and passes tests. Common tools: GitHub Actions, GitLab CI, Bitrise, Codemagic, Jenkins, Fastlane.
What does Fastlane's `gym` (build_app) and `match` do?
`gym`/`build_app` compiles and packages an iOS app into a signed .ipa; `match` centrally stores and syncs signing certificates and provisioning profiles in an encrypted git repo so a whole team shares consistent credentials.
Define the test pyramid and its typical proportions in a mobile testing pipeline.
A model recommending many fast unit tests at the base, fewer integration tests in the middle, and few slow, brittle end-to-end/UI tests at the top. A common heuristic is roughly $70\%$ unit, $20\%$ integration, $10\%$ UI tests.
Differentiate unit, integration, and UI (end-to-end) tests for mobile apps.
Unit tests verify a single function/class in isolation (fast, no device); integration tests verify modules working together (e.g. repository + network); UI/end-to-end tests drive the full app on a device/emulator (e.g. XCUITest, Espresso) simulating user flows.
What is beta distribution and name two common services for it.
Beta distribution delivers pre-release builds to a limited group of testers before public launch to gather feedback and catch bugs. Common services: TestFlight (iOS), Google Play Internal/Closed testing, and Firebase App Distribution (both platforms).
On TestFlight, what are the limits and review rules for internal vs external testers?
Internal testers: up to 100 users who are members of your App Store Connect team, no Apple review, immediate access. External testers: up to 10,000 users invited by email or public link, and the first build requires a Beta App Review.
List the tiers of Google Play testing tracks in order of audience size.
Internal testing (up to 100 testers, fastest), Closed testing (specific email lists or Google Groups), Open testing (public opt-in beta), then Production. Builds promote up the tracks toward full release.
What is a staged (phased) rollout on the app stores?
Releasing a new version to a growing percentage of users over time (e.g. $1\% \to 5\% \to 20\% \to 100\%$) so you can monitor crashes and metrics and halt the rollout before it reaches everyone if problems appear.
What is App Store Connect and what is its role?
Apple's web portal for managing iOS/macOS app submissions: uploading builds, setting metadata, screenshots, pricing, TestFlight, in-app purchases, and submitting for App Review, plus viewing sales and analytics.
Show the other 31 Release and Operations flashcards
Outline the high-level steps to submit an app to the Apple App Store.
(1) Register the App ID and create the app record in App Store Connect, (2) archive and upload a signed build via Xcode/Transporter, (3) fill in metadata, screenshots, pricing, and privacy details, (4) attach the build and submit for App Review, (5) release manually or automatically after approval.
What is the Google Play Console and what does it manage?
Google's web portal for publishing and managing Android apps: uploading AABs, managing release tracks, store listing, pricing, content rating, data safety, staged rollouts, and viewing Android vitals, ratings, and revenue.
Since August 2021, what artifact format does Google Play require for new apps and why?
The Android App Bundle (.aab) instead of a universal APK. Google Play uses it to generate optimized, device-specific APKs (split by ABI, density, language) via Dynamic Delivery, reducing download size.
What is the Data Safety section (Play) / Privacy Nutrition Label (App Store)?
A store-required disclosure of what user data an app collects, how it is used, whether it is shared with third parties, and whether it is linked to the user's identity, shown to users on the store listing before download.
Name three common reasons Apple rejects apps under the App Review Guidelines.
Crashes/bugs and broken functionality (Guideline 2), privacy violations or missing privacy policy (Guideline 5), and using private APIs or misleading/placeholder content. Also common: requiring external payment for digital goods instead of IAP, and insufficient app content ('minimum functionality').
Under Apple's guidelines, when must developers use In-App Purchase versus external payment?
Digital goods and services consumed within the app (subscriptions, unlocks, virtual currency) must use Apple's In-App Purchase. Physical goods and real-world services (e.g. ride-hailing, food delivery) must NOT use IAP and use other payment methods.
What is ASO (App Store Optimization) and what are its two broad goals?
ASO is optimizing an app's store presence to improve visibility in search/browse and to increase the conversion of impressions into installs. The two goals: (1) rank higher / be discoverable (keywords), and (2) convert visitors (icon, screenshots, ratings).
List the main on-metadata ASO factors a developer controls.
App title/name, subtitle (iOS) / short description (Android), keyword field (iOS, 100 chars), long description, app icon, screenshots and preview video, category, and (indirectly) ratings and reviews prompts.
Contrast how iOS and Android handle keywords for store search.
iOS has a dedicated 100-character keyword field (comma-separated, not shown to users) plus title/subtitle. Android has no keyword field; Google Play indexes the title, short description, and full description text for search relevance.
What is crash reporting and name two widely used mobile crash reporting tools.
Automatic capture and aggregation of app crashes/exceptions with stack traces, device state, and breadcrumbs so developers can diagnose and prioritize fixes. Common tools: Firebase Crashlytics and Sentry (also Bugsnag, App Center).
Define crash-free users rate and give a common release quality target.
$$\text{Crash-free users} = \frac{\text{users with no crash}}{\text{total active users}} \times 100\%$$ Many teams target $99.9\%$ or higher crash-free users as a release-health gate.
Why must you upload dSYMs (iOS) or mapping.txt (Android) for crash reporting?
Release builds are stripped/obfuscated, so raw crash stack traces are unreadable addresses. dSYM files (iOS) and the ProGuard/R8 mapping.txt (Android) let the crash reporter symbolicate/deobfuscate traces back to readable method names and line numbers.
Distinguish an event, a screen view, and a user property in mobile analytics.
An event is a discrete user action (e.g. 'add_to_cart') optionally with parameters; a screen view records which screen the user is on; a user property is a persistent attribute of the user/device (e.g. subscription tier, country) used for segmentation.
Define DAU, MAU, and the stickiness ratio.
DAU = Daily Active Users, MAU = Monthly Active Users. Stickiness measures engagement frequency: $$\text{Stickiness} = \frac{\text{DAU}}{\text{MAU}} \times 100\%$$ Higher values indicate users return more often; $20\%$ is a common baseline.
What is a retention curve and what is Day-N (e.g. D1/D7/D30) retention?
A retention curve plots the percentage of a cohort still active N days after install. D1/D7/D30 retention are the share of new users returning on day 1, 7, and 30. The curve typically drops sharply then flattens; the plateau indicates the core loyal base.
What is a funnel analysis in product analytics?
Tracking the sequence of steps toward a goal (e.g. view -> add to cart -> checkout -> purchase) and measuring drop-off at each step, so teams can identify where the largest share of users abandon the flow.
What is a feature flag (feature toggle) and give two benefits.
A configuration switch that enables/disables a feature at runtime without a new app release. Benefits: decouple deploy from release, enable gradual/percentage rollouts, run A/B tests, and kill a broken feature instantly (a 'kill switch').
What is Remote Config and how does it differ from a feature flag?
Remote Config is a cloud-stored set of key-value parameters an app fetches to change behavior/appearance without an update. A feature flag is a boolean subset of remote config; remote config more broadly can set strings, numbers, colors, and thresholds, and target user segments.
Explain the role of a kill switch in mobile operations.
A remotely controlled flag that lets the team disable a feature, endpoint, or the whole app path in production immediately when a critical bug, security issue, or backend failure is discovered, avoiding an emergency store release.
What are Over-the-Air (OTA) updates for apps, and what is a key store restriction?
OTA updates push new code/assets (e.g. JS bundles in React Native/Expo, or web assets) to installed apps without a store submission. Restriction: both stores forbid OTA updates that change the app's core purpose or add features outside the reviewed scope; only bug fixes/content within the original scope are allowed.
Compare native store updates with OTA (CodePush/EAS Update) updates.
Store updates can change native code but require review and user download; they are slow. OTA updates are instant and reviewless but limited to interpreted/JS/asset layers and cannot modify native binaries or bypass guidelines.
Classify the standard IAP product types on the app stores.
Consumable (used once, repurchasable, e.g. coins), Non-consumable (bought once, permanent, e.g. remove ads), Auto-renewable subscription (recurring access), and Non-renewing subscription (fixed-period access, no auto-renew).
What is a subscription free trial and an introductory offer?
A free trial gives full access for a period at no charge before the first billing; an introductory offer gives a discounted price (pay-as-you-go or pay-up-front) for an initial period to new subscribers. Both are configured per-subscription in the store.
What is the typical app store commission on IAP and subscriptions, including the Small Business reduction?
The standard commission is $30\%$. Under Apple's Small Business Program and Google Play's tiers, it drops to $15\%$ for developers earning under \$1M/year, and Apple charges $15\%$ on auto-renewable subscriptions after the subscriber's first year.
Define churn rate and its relationship to average subscription lifetime.
Churn is the fraction of subscribers who cancel in a period: $$\text{Churn} = \frac{\text{cancellations}}{\text{subscribers at start}}$$ Average customer lifetime in periods is approximately $\frac{1}{\text{churn rate}}$.
Write the formula for Customer Lifetime Value (LTV) in a simple subscription model.
$$\text{LTV} = \frac{\text{ARPU}}{\text{churn rate}}$$ where ARPU is average revenue per user per period. Equivalently, $\text{LTV} = \text{ARPU} \times \text{average lifetime}$. A viable business generally needs $\text{LTV} > \text{CAC}$ (customer acquisition cost).
Compare the main in-app advertising formats: banner, interstitial, rewarded, and native.
Banner: small persistent strip, low CPM, low disruption. Interstitial: full-screen ad at natural breaks. Rewarded: user opts in to watch for an in-app reward, high engagement/eCPM. Native: ad styled to match app content for seamless integration.
Define CPM, CPC, and eCPM in mobile advertising.
CPM = cost per mille (per 1000 impressions); CPC = cost per click. eCPM normalizes any model to per-1000-impression revenue: $$\text{eCPM} = \frac{\text{total earnings}}{\text{impressions}} \times 1000$$ It lets you compare ad networks/formats on one scale.
What is ad mediation and waterfall vs header bidding?
Mediation routes ad requests among multiple networks to maximize fill and revenue. A waterfall asks networks in a fixed priority order until one fills; header/in-app bidding runs a real-time unified auction so all networks bid simultaneously, typically yielding higher eCPM.
What distinguishes a push notification from an in-app message, and why get consent?
A push notification is delivered by the OS even when the app is closed (via APNs on iOS / FCM on Android); an in-app message shows only while the app is open. iOS requires explicit user opt-in (and Android 13+ needs POST_NOTIFICATIONS permission), so respecting consent preserves opt-in rates and avoids uninstalls.
Define push CTR and a healthy retention practice for notification frequency.
Push click-through rate: $$\text{CTR} = \frac{\text{notifications opened}}{\text{notifications delivered}} \times 100\%$$ To aid retention, personalize and segment messages, respect quiet hours and frequency caps, and use behavior triggers rather than blasting all users, which reduces opt-outs and uninstalls.
Mobile App Development Release and Operations FAQ
What is in the Mobile App Development Release and Operations syllabus?
Mobile App Development Release and Operations is split into 5 chapters: Build and Signing, CI/CD for Mobile, App Store Deployment, Monitoring and Maintenance and Monetization and Growth. Together they contain 17 topics.
How many chapters are in Mobile App Development Release and Operations?
5 chapters, containing 17 topics. The largest chapter is App Store Deployment, with 4 topics.
Are there flashcards for Mobile App Development Release and Operations?
Yes — a 51-card Release and Operations deck, printed in full in the flashcards section of this page and available in the Examius app with spaced repetition. The free plan covers one exam of your choice, including its flashcards; Examius Pro, a one-time purchase, unlocks every other exam and deck.