Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Home
CertNexus
Certified IoT Security Practitioner
ITS-110
Certified Internet of Things Security Practitioner (CIoTSP) Questions and Answers

Pass the CertNexus Certified IoT Security Practitioner ITS-110 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam ITS-110 Premium Access

View all detail and faqs for the ITS-110 exam

Go to Exam

768 Students Passed

84% Average Score

90% Same Questions

Viewing page 2 out of 3 pages

Viewing questions 11-20 out of questions

Questions # 11:

An IoT system administrator wants to mitigate the risk of rainbow table attacks. Which of the following methods or technologies can the administrator implement in order to address this concern?

Options:

Enable account lockout

Enable account database encryption

Require frequent password changes

Require complex passwords

Answer

Questions # 12:

An IoT manufacturer wants to ensure that their web-enabled cameras are secured against brute force password attacks. Which of the following technologies or protocols could they implement?

Options:

URL filtering policies

Account lockout policies

Software encryption

Buffer overflow prevention

Answer

Questions # 13:

A DevOps engineer wants to further secure the login mechanism to a website from IoT gateways. Which of the following is the BEST method the engineer should implement?

Options:

Require that passwords contain alphanumeric characters

Require two-factor or multifactor authentication

Require that passwords cannot include special characters

Require that passwords be changed periodically

Answer

Questions # 14:

You work for a multi-national IoT device vendor. Your European customers are complaining about their inability to access the personal information about them that you have collected. Which of the following regulations is your organization at risk of violating?

Options:

Sarbanes-Oxley (SOX)

General Data Protection Regulation (GDPR)

Electronic Identification Authentication and Trust Services (elDAS)

Database Service on Alternative Methods (DB-ALM)

Answer

Questions # 15:

An IoT developer needs to ensure that user passwords for a smartphone app are stored securely. Which of the following methods should the developer use to meet this requirement?

Options:

Encrypt all stored passwords using 256-bit Advanced Encryption Standard (AES-256)

Encrypt all stored passwords using 128-bit Twofish

Hash all passwords using Message Digest 5 (MD5)

Store all passwords in read-only memory

Answer

Questions # 16:

An IoT developer wants to ensure all sensor to portal communications are as secure as possible and do not require any client-side configuration. Which of the following is the developer most likely to use?

Options:

Virtual Private Networking (VPN)

Public Key Infrastructure (PKI)

IP Security (IPSec)

Secure/Multipurpose Internet Mail Extensions (S/MIME)

Answer

Questions # 17:

An IoT device has many sensors on it and that sensor data is sent to the cloud. An IoT security practitioner should be sure to do which of the following in regard to that sensor data?

Options:

Collect as much data as possible so as to maximize potential value of the new IoT use-case.

Collect only the minimum amount of data required to perform all the business functions.

The amount or type of data collected isn't important if you have a properly secured IoT device.

The amount or type of data collected isn't important if you implement proper authorization controls.

Answer

Questions # 18:

Which of the following techniques protects the confidentiality of the information stored in databases?

Options:

Hashing

Archiving

Monitoring

Encryption

Answer

Questions # 19:

A hacker is able to extract users' names, birth dates, height, and weight from an IoT manufacturer's user portal. Which of the following types of data has been compromised?

Options:

Protected health information

Personal health information

Personal identity information

Personally identifiable information

Answer

Questions # 20:

An embedded engineer wants to implement security features to be sure that the IoT gateway under development will only load verified images. Which of the following countermeasures could be used to achieve this goal?