Certified Internet of Things Security Practitioner (ITS-110) Free Practice Test

Question 1

What is one popular network protocol that is usually enabled by default on home routers that creates a large attack surface?

A. Open virtual private network (VPN)

B. Domain Name System Security Extensions (DNSSEC)

C. Universal Plug and Play (UPnP)

D. Network Address Translation (NAT)

Correct Answer: C

Question 2

An IoT device has many sensors on it and that sensor data is sent to the cloud. An IoT security practitioner should be sure to do which of the following in regard to that sensor data?

A. Collect as much data as possible so as to maximize potential value of the new IoT use-case.

B. The amount or type of data collected isn't important if you implement proper authorization controls.

C. Collect only the minimum amount of data required to perform all the business functions.

D. The amount or type of data collected isn't important if you have a properly secured IoT device.

Correct Answer: C

Question 3

If an attacker were able to gain access to a user's machine on your network, which of the following actions would she most likely take next?

A. Escalate privileges

B. Start log scrubbing

C. Perform port scanning

D. Initiate reconnaissance

Correct Answer: D

Question 4

An IoT developer wants to ensure that their cloud management portal is protected against compromised end-user credentials. Which of the following technologies should the developer implement?

A. An authentication policy which requires user passwords to include twelve characters, including uppercase, lowercase, and special characters.

B. An authentication policy which requires two random tokens generated by a hardware device.

C. An authentication policy that requires a password at initial logon, and a second password in order to access advanced features.

D. An authentication policy that requires a user to provide a strong password and on-demand token delivered via SMS.

Correct Answer: D

Question 5

An IoT software developer strives to reduce the complexity of his code to allow for efficient design and implementation. Which of the following terms describes the design principle he is implementing?

A. Demodulation

B. Abstraction

C. Encapsulation

D. Calibration

Correct Answer: B

Question 6

A hacker is able to eavesdrop on administrative sessions to remote IoT sensors. Which of the following has most likely been misconfigured or disabled?

A. Virtual private network (VPN)

B. Internet Protocol Security (IPSec)

C. Secure Shell (SSH)

D. Telnet

Correct Answer: B

Question 7

An IoT manufacturer needs to ensure that firmware flaws can be addressed even after their devices have been deployed. Which of the following methods should the manufacturer use to meet this requirement?

A. Ensure that device can accept Over-the-Air (OTA) firmware updates

B. Ensure that a writable copy of the device's configuration is stored in flash memory

C. Ensure that ail firmware is signed using digital certificates prior to deployment

D. Ensure that the bootloader can be accessed remotely using Secure Shell (SSH)

Correct Answer: A

Question 8

A compromised IoT device is initiating random connections to an attacker's server in order to exfiltrate sensitive dat a. Which type of attack is being used?

A. Honeypot

B. SSL session hijack

C. Man-in-the-middle (MITM)

D. Reverse shell

Correct Answer: D

Question 9

An IoT security administrator wishes to mitigate the risk of falling victim to Distributed Denial of Service (DDoS) attacks. Which of the following mitigation strategies should the security administrator implement? (Choose two.)

A. Enable unused Transmission Control Protocol (TCP) service ports in order to create a honeypot

B. Block the use of Transmission Control Protocol (TCP) and User Datagram Protocol (UDP) through his perimeter firewall

C. Require the use of X.509 digital certificates for all incoming requests

D. Block all inbound packets originating from service ports

E. Block all inbound packets with an internal source IP address

Correct Answer: B,C

Question 10

Which of the following techniques protects the confidentiality of the information stored in databases?

A. Monitoring

B. Encryption

C. Archiving

D. Hashing

Correct Answer: B

Welcome to TestSimulate

CertNexus Certified Internet of Things Security Practitioner (ITS-110) Free Practice Test