Question 1

An IoT device has many sensors on it and that sensor data is sent to the cloud. An IoT security practitioner should be sure to do which of the following in regard to that sensor data?

Options :

A : Collect as much data as possible so as to maximize potential value of the new IoT use-case.

B : Collect only the minimum amount of data required to perform all the business functions.

C : The amount or type of data collected isn't important if you have a properly secured IoT device.

D : The amount or type of data collected isn't important if you implement proper authorization controls.

Answer: B

Question 2

A corporation's IoT security administrator has configured his IoT endpoints to send their data directly to a database using Secure Sockets Layer (SSL)/Transport Layer Security (TLS). Which entity provides the symmetric key used to secure the data in transit?

Options :

A : The administrator-s machine

B : The database server

C : The Key Distribution Center (KDC)

D : The IoT endpoint

Answer: B

Question 3

Which of the following techniques protects the confidentiality of the information stored in databases?

Options :

A : Hashing

B : Archiving

C : Monitoring

D : Encryption

Answer: D

Question 4

An IoT systems administrator wants to ensure that all data stored on remote IoT gateways is unreadable. Which of the following technologies is the administrator most likely to implement?

Options :

A : Secure Hypertext Transmission Protocol (HTTPS)

B : Internet Protocol Security (IPSec)

C : Triple Data Encryption Standard (3DES)

D : Message Digest 5 (MD5)

Answer: B

Question 5

A web administrator is concerned about injection attacks. Which of the following mitigation techniques should the web administrator implement?

Options :

A : Configure single sign-on (SSO)

B : Parameter validation

C : Require strong passwords

D : Require two-factor authentication (2FA)

Answer: B

Free ITS-110 Mock Exam – Practice Online Confidently

Buying Options: