Question 1

An IoT device has many sensors on it and that sensor data is sent to the cloud. An IoT security practitioner should be sure to do which of the following in regard to that sensor data?

Options :

A : Collect as much data as possible so as to maximize potential value of the new IoT use-case.

B : Collect only the minimum amount of data required to perform all the business functions.

C : The amount or type of data collected isn't important if you have a properly secured IoT device.

D : The amount or type of data collected isn't important if you implement proper authorization controls.

Answer: B

Question 2

An IoT security architect wants to implement Bluetooth between two nodes. The Elliptic Curve Diffie-Hellman (ECDH) cipher suite has been identified as a requirement. Which of the following Bluetooth versions can meet this requirement?

Options :

A : Bluetooth Low Energy (BLE) v4.0

B : BLE v4.2

C : BLE v4.1

D : Any of the BLE versions

Answer: D

Question 3

An IoT developer discovers that clients frequently fall victim to phishing attacks. What should the developer do in order to ensure that customer accounts cannot be accessed even if the customer's password has been compromised?

Options :

A : Implement two-factor authentication (2FA)

B : Enable Kerberos authentication

C : Implement account lockout policies

D : Implement Secure Lightweight Directory Access Protocol (LDAPS)

Answer: A

Question 4

A web administrator is concerned about injection attacks. Which of the following mitigation techniques should the web administrator implement?

Options :

A : Configure single sign-on (SSO)

B : Parameter validation

C : Require strong passwords

D : Require two-factor authentication (2FA)

Answer: B

Question 5

An IoT developer wants to ensure that data collected from a remotely deployed power station monitoring system is transferred securely to the cloud. Which of the following technologies should the developer consider?

Options :

A : Secure/Multipurpose Internet Mail Extensions (S/MIME)

B : Message-digest 5 (MD5)

C : Blowfish

D : Transport Layer Security (TLS)

Answer: D

Confidently Practice Online with Free ITS-110 Exam Cram

Buying Options: