Things (IoT) and Infrastructure Questions and Verified
Answers 100% Correct A Grade
QUESTION
A company develops a small tracker to be used in parcels to track progress via Global
Positioning System (GPS). Testing reveals that the tracker has a Joint Test Action Group
(JTAG) port on the circuit board that can be used to overwrite the firmware on the tracker and
provide false location data. Which two Internet of Things Security Foundation (IoTSF) Best
Practice Guidelines (BPGs) should this company follow in its design process to ensure security
from these forms of attack? Choose 2 answers.
- CORRECT ANS:>>
Device secure boot, Physical security
QUESTION
A company develops an IoT-based security system. The system uses proximity sensors that
communicate with a central gateway using a 433 MHZ radio signal. Testing reveals that the
traffic can be sniffed with a software-defined radio, and an attacker could spoof the proximity
sensor by copying the authentication details from the radio traffic. Which Internet of Things
Security Foundation (IoTSF) Best Practice Guideline (BPG) should this company fol- low in its
design process to ensure the security of the radio data?
- CORRECT ANS:>>
Network connections
QUESTION
A company hosts a database in a public cloud. Multiple IoT devices are compromised and used
to generate a high volume of requests targeting the database to affect its availability. Which type
of attack is this?
- CORRECT ANS:>>
Distributed denial of service (DDoS)
QUESTION
A company developed an IoT smart photo frame that allows users to upload photos to their
device using a web browser. Testing revealed that users can upload files onto the root
filesystem. Which Internet of Things Security Foundation (IoTSF) Best Practice Guideline (BPG)
should this company follow in its design process to ensure filesystem permissions are set
correctly?
- CORRECT ANS:>>
Se- cure operating system
QUESTION
A company uses IoT devices to capture data in the field and transmit it for central processing.
, The company plans to follow the Internet of Things Security Foundation's (IoTSF) Best Practice
Guidelines (BPGs) to ensure that personal data is protected.
Which IoTSF guideline should this company use?
- CORRECT ANS:>>
Securing software updates
QUESTION
A company is developing a smart speaker. The company wants to review industry standards on
device boot and operating system security to improve security in its devices. Which two
resources should this company evaluate? Choose 2 answers.
- CORRECT ANS:>>
Code of Practice, Best Practice Guidelines
QUESTION
Malware has infected several IoT devices in a company. These devices were using default
configurations. What should the company do to prevent the malware from being installed?
- CORRECT ANS:>>
Change the devices' usernames and passwords
QUESTION
What does blockchain implement to ensure reliable data are returned when there are multiple
sensors measuring the same data?
- CORRECT ANS:>>
Agreed consensus mechanism
QUESTION
Which blockchain feature in an IoT application ensures that a transaction is tamperproof once it
is validated?
- CORRECT ANS:>>
Immutability
QUESTION
What is the purpose of the consensus mechanism enabled through blockchain when collecting
the same signals from multiple IoT sensors?
- CORRECT ANS:>>
Pro- viding a single version of the truth across all sensor data
QUESTION