File Info
| Exam | Certified Internet of Things Security Practitioner |
| Number | ITS-110 |
| File Name | CertNexus.ITS-110.VCEplus.2023-08-17.33q.vcex |
| Size | 20 KB |
| Posted | Aug 17, 2023 |
| Download | CertNexus.ITS-110.VCEplus.2023-08-17.33q.vcex |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
A DevOps engineer wants to provide secure network services to an IoT/cloud solution. Which of the following countermeasures should be implemented to mitigate network attacks that can render a network useless?
- Network firewall
- Denial of Service (DoS)/Distributed Denial of Service (DDoS) mitigation
- Web application firewall (WAF)
- Deep Packet Inspection (DPI)
Correct answer: B
Question 2
What is one popular network protocol that is usually enabled by default on home routers that creates a large attack surface?
- Open virtual private network (VPN)
- Universal Plug and Play (UPnP)
- Network Address Translation (NAT)
- Domain Name System Security Extensions (DNSSEC)
Correct answer: B
Question 3
An IoT systems administrator needs to be able to detect packet injection attacks. Which of the follow methods or technologies is the administrator most likely to implement?
- Internet Protocol Security (IPSec) with Encapsulating Security Payload (ESP)
- Point-to-Point Tunneling Protocol (PPTP)
- Layer 2 Tunneling Protocol (L2TP)
- Internet Protocol Security (IPSec) with Authentication Headers (AH)
Correct answer: D
Question 4
An IoT developer wants to ensure all sensor to portal communications are as secure as possible and do not require any client-side configuration. Which of the following is the developer most likely to use?
- Virtual Private Networking (VPN)
- Public Key Infrastructure (PKI)
- IP Security (IPSec)
- Secure/Multipurpose Internet Mail Extensions (S/MIME)
Correct answer: C
Question 5
An IoT security practitioner should be aware of which common misconception regarding data in motion?
- That transmitted data is point-to-point and therefore a third party does not exist.
- The assumption that all data is encrypted properly and cannot be exploited.
- That data can change instantly so old data is of no value.
- The assumption that network protocols automatically encrypt data on the fly.
Correct answer: B
Question 6
A hacker is able to eavesdrop on administrative sessions to remote IoT sensors. Which of the following has most likely been misconfigured or disabled?
- Secure Shell (SSH)
- Internet Protocol Security (IPSec)
- Telnet
- Virtual private network (VPN)
Correct answer: B
Question 7
A corporation's IoT security administrator has configured his IoT endpoints to send their data directly to a database using Secure Sockets Layer (SSL)/Transport Layer Security (TLS). Which entity provides the symmetric key used to secure the data in transit?
- The administrator's machine
- The database server
- The Key Distribution Center (KDC)
- The IoT endpoint
Correct answer: B
Question 8
An IoT security architect needs to secure data in motion. Which of the following is a common vulnerability used to exploit unsecure data in motion?
- External flash access
- Misconfigured Secure Sockets Layer (SSL)/Transport Layer Security (TLS)
- Databases and datastores
- Lack of memory space isolation
Correct answer: B
Question 9
In order to successfully perform a man-in-the-middle (MITM) attack against a secure website, which of the following could be true?
- Client to server traffic must use Hypertext Transmission Protocol (HTTP)
- The server must be vulnerable to malformed Uniform Resource Locator (URL) injection
- The server must be using a deprecated version of Transport Layer Security (TLS)
- The web server's X.509 certificate must be compromised
Correct answer: C
Question 10
An IoT security administrator wishes to mitigate the risk of falling victim to Distributed Denial of Service (DDoS) attacks. Which of the following mitigation strategies should the security administrator implement?
(Choose two.)
- Block all inbound packets with an internal source IP address
- Block all inbound packets originating from service ports
- Enable unused Transmission Control Protocol (TCP) service ports in order to create a honeypot
- Block the use of Transmission Control Protocol (TCP) and User Datagram Protocol (UDP) through his perimeter firewall
- Require the use of X.509 digital certificates for all incoming requests
Correct answer: DE
