Question 1

An IoT systems administrator wants to ensure that all data stored on remote IoT gateways is unreadable. Which of the following technologies is the administrator most likely to implement?

Options :

A : Secure Hypertext Transmission Protocol (HTTPS)

B : Internet Protocol Security (IPSec)

C : Triple Data Encryption Standard (3DES)

D : Message Digest 5 (MD5)

Answer: B

Question 2

An IoT device has many sensors on it and that sensor data is sent to the cloud. An IoT security practitioner should be sure to do which of the following in regard to that sensor data?

Options :

A : Collect as much data as possible so as to maximize potential value of the new IoT use-case.

B : Collect only the minimum amount of data required to perform all the business functions.

C : The amount or type of data collected isn't important if you have a properly secured IoT device.

D : The amount or type of data collected isn't important if you implement proper authorization controls.

Answer: B

Question 3

An IoT developer discovers that clients frequently fall victim to phishing attacks. What should the developer do in order to ensure that customer accounts cannot be accessed even if the customer's password has been compromised?

Options :

A : Implement two-factor authentication (2FA)

B : Enable Kerberos authentication

C : Implement account lockout policies

D : Implement Secure Lightweight Directory Access Protocol (LDAPS)

Answer: A

Question 4

A hacker is able to access privileged information via an IoT portal by modifying a SQL parameter in a URL. Which of the following BEST describes the vulnerability that allows this type of attack?

Options :

A : Unvalidated redirect or forwarding

B : Insecure HTTP session management

C : Unsecure direct object references

D : Unhandled malformed URLs

Answer: C

Question 5

An IoT software developer wants the users of her software tools to know if they have been modified by someone other than her. Which of the following tools or techniques should she use?

Options :

A : Encryption

B : Obfuscation

C : Hashing

D : Fuzzing

Answer: C