2023 Latest ITS-110 dumps Exam Material with 102 Questions

CertNexus ITS-110 Questions and Answers Guarantee you Oass the Test Easily

NEW QUESTION # 30
Web forms that contain unvalidated fields are vulnerable to which of the following attacks? (Choose two.)

• A. Man-in-the-middle (MITM)
• B. Ping of death
• C. Cross-Site Scripting (XSS)
• D. Smurf
• E. SQL Injection (SQLi)

Answer: C,E

NEW QUESTION # 31
Which of the following attacks relies on the trust that a website has for a user's browser?

• A. Phishing
• B. Cross-Site Scripting (XSS)
• C. SQL Injection (SQLi)
• D. Cross-Site Request Forgery (CSRF)

Answer: D

NEW QUESTION # 32
An OT security practitioner wants to implement two-factor authentication (2FA). Which of the following is the least secure method to use for implementation?

• A. 2FA over Short Message Service (SMS)
• B. Fast Identity Online (FIDO) Universal 2nd Factor (U2F) USB key
• C. Out-of-band authentication (OOBA)
• D. Authenticator Apps for smartphones

Answer: A

NEW QUESTION # 33
You made an online purchase of a smart watch from a software as a service (SaaS) vendor, and filled out an extensive profile that will help you track several fitness variables. The vendor will provide you with customized health insights based on your profile. With which of the following regulations should the company be compliant? (Choose three.)

• A. Health Insurance Portability and Accountability Act (HIPAA)
• B. Federal Information Security Management Act (FISMA)
• C. Gramm-Leach-Bliley Act (GLBA)
• D. Family Educational Rights and Privacy Act (FERPA)
• E. Federal Energy Regulatory Commission (FERC)
• F. Sarbanes-Oxley (SOX)
• G. Payment Card Industry Data Security Standard (PCI-DSS)

Answer: A,D,G

NEW QUESTION # 34
An IoT developer wants to ensure all sensor to portal communications are as secure as possible and do not require any client-side configuration. Which of the following is the developer most likely to use?

• A. IP Security (IPSec)
• B. Virtual Private Networking (VPN)
• C. Public Key Infrastructure (PKI)
• D. Secure/Multipurpose Internet Mail Extensions (S/MIME)

Answer: A

NEW QUESTION # 35
A hacker is sniffing network traffic with plans to intercept user credentials and then use them to log into remote websites. Which of the following attacks could the hacker be attempting? (Choose two.)

• A. Spear phishing
• B. Masquerading
• C. Session replay
• D. Brute force
• E. Directory traversal

Answer: A,D

NEW QUESTION # 36
A security practitioner wants to encrypt a large datastore. Which of the following is the BEST choice to implement?

• A. Symmetric encryption standards
• B. Asymmetric encryption standards
• C. Elliptic curve cryptography (ECC)
• D. Diffie-Hellman (DH) algorithm

Answer: A

NEW QUESTION # 37
An IoT developer wants to ensure that data collected from a remotely deployed power station monitoring system is transferred securely to the cloud. Which of the following technologies should the developer consider?

• A. Blowfish
• B. Transport Layer Security (TLS)
• C. Message-digest 5 (MD5)
• D. Secure/Multipurpose Internet Mail Extensions (S/MIME)

Answer: B

NEW QUESTION # 38
Which of the following methods or technologies is most likely to be used in order to mitigate brute force attacks?

• A. Automated security logging
• B. Role-based access control
• C. Account lockout policy
• D. Secure password recovery

Answer: C

NEW QUESTION # 39
In designing the campus of an IoT device manufacturer, a security consultant was hired to recommend best practices for deterring criminal behavior. Which of the following approaches would he have used to meet his client's needs?

• A. National Institute of Standards and Technology Cybersecurity Framework (NIST CSF)
• B. British Standard 7799 part 3 (BS 7799-3)
• C. Crime Prevention Through Environmental Design (CPTED)
• D. International Organization for Standardization 17799 (ISO 17799)

Answer: C

NEW QUESTION # 40
An IoT service collects massive amounts of data and the developer is encrypting the data, forcing administrative users to authenticate and be authorized. The data is being disposed of properly and on a timely basis. However, which of the following countermeasures is the developer most likely overlooking?

• A. That private data can never be fully destroyed.
• B. That data is only valuable as perceived by the beholder.
• C. The best practice to only collect critical data and nothing more.
• D. That data isn't valuable unless it's used as evidence for crime committed.

Answer: C

NEW QUESTION # 41
An IoT manufacturer wants to ensure that their web-enabled cameras are secured against brute force password attacks. Which of the following technologies or protocols could they implement?

• A. Account lockout policies
• B. Buffer overflow prevention
• C. Software encryption
• D. URL filtering policies

Answer: A

NEW QUESTION # 42
You work for a business-to-consumer (B2C) IoT device company. Your organization wishes to publish an annual report showing statistics related to the volume and variety of sensor data it collects. Which of the following should your organization do prior to using this information?

• A. Require customers to sign a subscription license
• B. Confirm the devices they've sold are turned on
• C. Remove any customer-specific data
• D. Ensure all sensors are running the latest software

Answer: C

NEW QUESTION # 43
Passwords should be stored...

• A. Only in cleartext.
• B. Inside a digital certificate.
• C. For no more than 30 days.
• D. As a hash value.

Answer: D

NEW QUESTION # 44
Which of the following encryption standards should an IoT developer select in order to implement an asymmetric key pair?

• A. Elliptic curve cryptography (ECC)
• B. Advanced Encryption Standard (AES)
• C. Triple Data Encryption Standard (3DES)
• D. Temporal Key Integrity Protocol (TKIP)

Answer: A

NEW QUESTION # 45
Which of the following technologies allows for encryption of networking communications without requiring any configuration on IoT endpoints?

• A. Elliptic curve cryptography (ECC)
• B. Internet Protocol Security (IPSec)
• C. Transport Layer Security (TLS)
• D. Virtual private network (VPN)

Answer: D

NEW QUESTION # 46
A user grants an IoT manufacturer consent to store personally identifiable information (PII). According to the General Data Protection Regulation (GDPR), when is an organization required to delete this data?

• A. Within seven days of being transferred to secure, long-term storage
• B. Within sixty days after collection, unless encrypted
• C. Within ninety days after collection, unless required for a legal proceeding
• D. Within thirty days of a user's written request

Answer: D

NEW QUESTION # 47
If an attacker were able to gain access to a user's machine on your network, which of the following actions would she most likely take next?

• A. Start log scrubbing
• B. Perform port scanning
• C. Escalate privileges
• D. Initiate reconnaissance

Answer: B

NEW QUESTION # 48
An IoT developer discovers that clients frequently fall victim to phishing attacks. What should the developer do in order to ensure that customer accounts cannot be accessed even if the customer's password has been compromised?

• A. Implement account lockout policies
• B. Implement two-factor authentication (2FA)
• C. Enable Kerberos authentication
• D. Implement Secure Lightweight Directory Access Protocol (LDAPS)

Answer: B

NEW QUESTION # 49
Which of the following is the BEST encryption standard to implement for securing bulk data?

• A. Rivest Cipher 4 (RC4)
• B. Elliptic curve cryptography (ECC)
• C. Triple Data Encryption Standard (3DES)
• D. Advanced Encryption Standard (AES)

Answer: D

NEW QUESTION # 50
If a site administrator wants to improve the secure access to a cloud portal, which of the following would be the BEST countermeasure to implement?

• A. Require frequent password changes
• B. Utilize role-based access control (RBAC)
• C. Mandate multi-factor authentication (MFA)
• D. Require separation of duties

Answer: B

NEW QUESTION # 51
An IoT software developer strives to reduce the complexity of his code to allow for efficient design and implementation. Which of the following terms describes the design principle he is implementing?

• A. Encapsulation
• B. Demodulation
• C. Abstraction
• D. Calibration

Answer: C

NEW QUESTION # 52
Which of the following attacks is a reflected Distributed Denial of Service (DDoS) attack?

• A. Smurf
• B. Teardrop
• C. Ping of Death
• D. SYN flood

Answer: D

NEW QUESTION # 53
......

Share Latest ITS-110 DUMP Questions and Answers: https://www.testsimulate.com/ITS-110-study-materials.html