QUESTION 23
An IoT software developer wants the users of her software tools to know if they have been modified by someone other than her. Which of the following tools or techniques should she use?

QUESTION 24
A hacker was able to generate a trusted certificate that spoofs an IoT-enabled security camera’s management portal. Which of the following is the most likely cause of this exploit?

QUESTION 25
An IoT developer wants to ensure that data collected from a remotely deployed power station monitoring system is transferred securely to the cloud. Which of the following technologies should the developer consider?

QUESTION 26
If an attacker were able to gain access to a user’s machine on your network, which of the following actions would she most likely take next?

QUESTION 27
An IoT security administrator is concerned about an external attacker using the internal device management local area network (LAN) to compromise his IoT devices. Which of the following countermeasures should the security administrator implement? (Choose three.)

QUESTION 28
Which of the following methods is an IoT portal administrator most likely to use in order to mitigate Distributed Denial of Service (DDoS) attacks?

QUESTION 29
A hacker is sniffing network traffic with plans to intercept user credentials and then use them to log into remote websites. Which of the following attacks could the hacker be attempting? (Choose two.)

QUESTION 30
A hacker is able to eavesdrop on administrative sessions to remote IoT sensors. Which of the following has most likely been misconfigured or disabled?

QUESTION 31
A hacker enters credentials into a web login page and observes the server’s responses. Which of the following attacks is the hacker attempting?

QUESTION 32
An IoT manufacturer wants to ensure that their web-enabled cameras are secured against brute force password attacks. Which of the following technologies or protocols could they implement?

QUESTION 33
A manufacturer wants to ensure that approved software is delivered securely and can be verified prior to installation on its IoT devices. Which of the following technologies allows the manufacturer to meet this requirement?

QUESTION 34
An IoT systems administrator needs to be able to detect packet injection attacks. Which of the follow methods or technologies is the administrator most likely to implement?

QUESTION 35
It is a new employee’s first day on the job. When trying to access secured systems, he incorrectly enters his credentials multiple times. Which resulting action should take place?

QUESTION 36
An IoT software developer strives to reduce the complexity of his code to allow for efficient design and implementation. Which of the following terms describes the design principle he is implementing?

QUESTION 37
Which of the following functions can be added to the authorization component of AAA to enable the principal of least privilege with flexibility?

QUESTION 38
A manufacturer wants to ensure that user account information is isolated from physical attacks by storing credentials off-device. Which of the following methods or technologies best satisfies this requirement?