CertNexus Certified Internet of Things Security Practitioner

QUESTION NO: 1
An IoT system administrator discovers that hackers are using rainbow tables to compromise user accounts on their cloud management portal. What should the administrator do in order to mitigate this risk?

A. Implement granular role-based access B. Implement robust password policies C. Implement URL filtering D. Implement certificates on all login pages

Correct Answer: A

QUESTION NO: 2
The network administrator for an organization has read several recent articles stating that replay attacks are on the rise. Which of the following secure protocols could the administrator implement to prevent replay attacks via remote workers' VPNs? (Choose three.)

A. Enhanced Interior Gateway Routing Protocol (EIGRP) B. Challenge Handshake Authentication Protocol (CHAP) C. Internet Protocol Security (IPSec) D. Password Authentication Protocol (PAP) E. Layer 2 Tunneling Protocol (L2TP) F. Interior Gateway Routing Protocol (IGRP) G. Simple Network Management Protocol (SNMP)

Correct Answer: B,C,E

QUESTION NO: 3
You work for a multi-national IoT device vendor. Your European customers are complaining about their inability to access the personal information about them that you have collected. Which of the following regulations is your organization at risk of violating?

A. General Data Protection Regulation (GDPR) B. Database Service on Alternative Methods (DB-ALM) C. Sarbanes-Oxley (SOX) D. Electronic Identification Authentication and Trust Services (elDAS)

Correct Answer: A

QUESTION NO: 4
Which of the following technologies allows for encryption of networking communications without requiring any configuration on IoT endpoints?

A. Internet Protocol Security (IPSec) B. Transport Layer Security (TLS) C. Virtual private network (VPN) D. Elliptic curve cryptography (ECC)

Correct Answer: C

QUESTION NO: 5
An IoT gateway will be brokering data on numerous northbound and southbound interfaces. A security practitioner has the data encrypted while stored on the gateway and encrypted while transmitted across the network. Should this person be concerned with privacy while the data is in use?

A. Yes, because the data is vulnerable during processing. B. No, because the data is inside the CPU's secure region while being used. C. No, since the data is already encrypted while at rest and while in motion. D. Yes, because the hash wouldn't protect the integrity of the data.

Correct Answer: A

QUESTION NO: 6
A compromised IoT device is initiating random connections to an attacker's server in order to exfiltrate sensitive dat a. Which type of attack is being used?

A. Reverse shell B. Man-in-the-middle (MITM) C. SSL session hijack D. Honeypot

Correct Answer: A

QUESTION NO: 7
An IoT integrator wants to deploy an IoT gateway at the Edge and have it connect to the cloud via API. In order to minimize risk, which of the following actions should the integrator take before integration?

A. Write down the default login and password B. Create new credentials using a strong password C. Reset the IoT gateway to factory defaults D. Remove all logins and passwords that may exist

Correct Answer: C

QUESTION NO: 8
A hacker enters credentials into a web login page and observes the server's responses. Which of the following attacks is the hacker attempting?

A. Account enumeration B. Spear phishing C. Directory traversal D. Buffer overflow

Correct Answer: A

QUESTION NO: 9
A DevOps engineer wants to provide secure network services to an IoT/cloud solution. Which of the following countermeasures should be implemented to mitigate network attacks that can render a network useless?

A. Web application firewall (WAF) B. Deep Packet Inspection (DPI) C. Denial of Service (DoS)/Distributed Denial of Service (DDoS) mitigation D. Network firewall

Correct Answer: C

QUESTION NO: 10
An IoT device which allows unprotected shell access via console ports is most vulnerable to which of the following risks?

A. Malware installation B. Rainbow table attacks C. Directory harvesting D. Buffer overflow

Correct Answer: A

CertNexus Certified Internet of Things Security Practitioner - ITS-110 Exam Questions