WGU D337 Internet of Things and
Infrastructure EXAM (New 2026/ 2027
Update) Questions & Answers {Grade A}
100% Correct (Verified Solutions)
A company hosts a database in a public cloud. Multiple IoT devices are compromised
and used to generate a high volume of requests targeting the database to affect its
availability.
Which type of attack is this?
A) Cross-site scripting
B) Distributed denial of service (DDoS)
C) Spear phishing
D) Structured Query Language (SQL) injection - Correct answer B
A company developed an IoT smart photo frame that allows users to upload photos to
their device using a web browser. Testing revealed that users can upload files onto the
root filesystem.
,Which Internet of Things Security Foundation (IoTSF) Best Practice Guideline (BPG)
should this company follow in its design process to ensure filesystem permissions are
set correctly?
A) Device secure boot
B) Physical security
C) Secure operating system
D) Application security - Correct answer C
A company uses IoT devices to capture data in the field and transmit it for central
processing. The company plans to follow the Internet of Things Security Foundation's
(IoTSF) Best Practice Guidelines (BPGs) to ensure that personal data is protected.
Which IoTSF guideline should this company use?
A) Device secure boot
B) Physical security
,C) Securing software updates
D) Application security - Correct answer D
A company is developing a smart speaker. The company wants to review industry
standards on device boot and operating system security to improve security in its
devices.
Which two resources should this company evaluate?
Choose 2 answers.
1. Code of Practice
2. Best Practice Guidelines
3. Human-in-the-loop
4. Internet of Bodies
A) 1, 2
B) 1, 3
, C) 3, 4
D) 2, 4 - Correct answer A
Malware has infected several IoT devices in a company. These devices were using
default configurations.
What should the company do to prevent the malware from being installed?
A) Alter the port the devices use to communicate
B) Scan for unusual packets being sent to the devices
C) Change the devices' usernames and passwords
D) Install a firewall limiting communication to the devices - Correct answer C
What does blockchain implement to ensure reliable data are returned when there are
multiple sensors measuring the same data?
A) Mega-merger method
B) Agreed consensus mechanism
C) Shared storage quorum
Infrastructure EXAM (New 2026/ 2027
Update) Questions & Answers {Grade A}
100% Correct (Verified Solutions)
A company hosts a database in a public cloud. Multiple IoT devices are compromised
and used to generate a high volume of requests targeting the database to affect its
availability.
Which type of attack is this?
A) Cross-site scripting
B) Distributed denial of service (DDoS)
C) Spear phishing
D) Structured Query Language (SQL) injection - Correct answer B
A company developed an IoT smart photo frame that allows users to upload photos to
their device using a web browser. Testing revealed that users can upload files onto the
root filesystem.
,Which Internet of Things Security Foundation (IoTSF) Best Practice Guideline (BPG)
should this company follow in its design process to ensure filesystem permissions are
set correctly?
A) Device secure boot
B) Physical security
C) Secure operating system
D) Application security - Correct answer C
A company uses IoT devices to capture data in the field and transmit it for central
processing. The company plans to follow the Internet of Things Security Foundation's
(IoTSF) Best Practice Guidelines (BPGs) to ensure that personal data is protected.
Which IoTSF guideline should this company use?
A) Device secure boot
B) Physical security
,C) Securing software updates
D) Application security - Correct answer D
A company is developing a smart speaker. The company wants to review industry
standards on device boot and operating system security to improve security in its
devices.
Which two resources should this company evaluate?
Choose 2 answers.
1. Code of Practice
2. Best Practice Guidelines
3. Human-in-the-loop
4. Internet of Bodies
A) 1, 2
B) 1, 3
, C) 3, 4
D) 2, 4 - Correct answer A
Malware has infected several IoT devices in a company. These devices were using
default configurations.
What should the company do to prevent the malware from being installed?
A) Alter the port the devices use to communicate
B) Scan for unusual packets being sent to the devices
C) Change the devices' usernames and passwords
D) Install a firewall limiting communication to the devices - Correct answer C
What does blockchain implement to ensure reliable data are returned when there are
multiple sensors measuring the same data?
A) Mega-merger method
B) Agreed consensus mechanism
C) Shared storage quorum