[2023] ITS-110 Exam Dumps, Test Engine Practice Test Questions [Q44-Q65]

ExamBoosts July 20, 2023 ITS-110 > CertNexus 0

Rate this post

[2023] ITS-110 Exam Dumps, Test Engine Practice Test Questions

Pass ITS-110 exam [Jul 20, 2023] Updated 102 Questions

The Internet of Things (IoT) has become an increasingly important aspect of our daily lives. As the number of interconnected devices continues to grow, so does the need for robust security measures that can protect both people and businesses from cyber attacks. To meet this demand, CertNexus has developed the ITS-110 exam, which is specifically designed to certify individuals as Internet of Things Security Practitioners.

NEW QUESTION 44
If a site administrator wants to improve the secure access to a cloud portal, which of the following would be the BEST countermeasure to implement?

Require frequent password changes

Mandate multi-factor authentication (MFA)

Utilize role-based access control (RBAC)

Require separation of duties

NEW QUESTION 45
Which of the following items should be part of an IoT software company’s data retention policy?

Transport encryption algorithms

X.509 certificate expiration

Data backup storage location

Password expiration requirements

NEW QUESTION 46
A hacker enters credentials into a web login page and observes the server’s responses. Which of the following attacks is the hacker attempting?

Account enumeration

Directory traversal

Buffer overflow

Spear phishing

NEW QUESTION 47
A user grants an IoT manufacturer consent to store personally identifiable information (PII). According to the General Data Protection Regulation (GDPR), when is an organization required to delete this data?

Within ninety days after collection, unless required for a legal proceeding

Within thirty days of a user’s written request

Within seven days of being transferred to secure, long-term storage

Within sixty days after collection, unless encrypted

NEW QUESTION 48
Which of the following policies provides the BEST protection against identity theft when data stored on an IoT portal has been compromised?

Data retention polices

Data categorization policies

Data anonymization policies

Data disposal policies

NEW QUESTION 49
An IoT systems administrator needs to be able to detect packet injection attacks. Which of the follow methods or technologies is the administrator most likely to implement?

Internet Protocol Security (IPSec) with Encapsulating Security Payload (ESP)

Point-to-Point Tunneling Protocol (PPTP)

Layer 2 Tunneling Protocol (L2TP)

Internet Protocol Security (IPSec) with Authentication Headers (AH)

NEW QUESTION 50
In order to gain access to a user dashboard via an online portal, an end user must provide their username, a PIN, and a software token code. This process is known as:

Type 1 authentication

Type 2 authentication

Two-factor authentication

Biometric authentication

NEW QUESTION 51
An IoT manufacturer needs to ensure that firmware flaws can be addressed even after their devices have been deployed. Which of the following methods should the manufacturer use to meet this requirement?

Ensure that the bootloader can be accessed remotely using Secure Shell (SSH)

Ensure that a writable copy of the device’s configuration is stored in flash memory

Ensure that device can accept Over-the-Air (OTA) firmware updates

Ensure that ail firmware is signed using digital certificates prior to deployment

NEW QUESTION 52
You work for an IoT software-as-a-service (SaaS) provider. Your boss has asked you to research a way to effectively dispose of stored sensitive customer dat a. Which of the following methods should you recommend to your boss?

Crypto-shredding

Degaussing

Overwriting

Physical destruction

NEW QUESTION 53
An IoT security administrator is concerned that someone could physically connect to his network and scan for vulnerable devices. Which of the following solutions should he install to prevent this kind of attack?

Media Access Control (MAC)

Network Access Control (NAC)

Host Intrusion Detection System (HIDS)

Network Intrusion Detection System (NIDS)

NEW QUESTION 54
During a brute force test on his users’ passwords, the security administrator found several passwords that were cracked quickly. Which of the following passwords would have taken the longest to crack?

GUESSmyPASSWORD

Gu3$$MyP@s$w0Rd

123my456password789

**myPASSword**

NEW QUESTION 55
Which of the following attacks is a reflected Distributed Denial of Service (DDoS) attack?

Teardrop

Ping of Death

SYN flood

Smurf

NEW QUESTION 56
An embedded developer is about to release an IoT gateway. Which of the following precautions must be taken to minimize attacks due to physical access?

Allow access only to the software

Remove all unneeded physical ports

Install a firewall on network ports

Allow easy access to components

NEW QUESTION 57
What is one popular network protocol that is usually enabled by default on home routers that creates a large attack surface?

Open virtual private network (VPN)

Universal Plug and Play (UPnP)

Network Address Translation (NAT)

Domain Name System Security Extensions (DNSSEC)

NEW QUESTION 58
It is a new employee’s first day on the job. When trying to access secured systems, he incorrectly enters his credentials multiple times. Which resulting action should take place?

His account is deleted.

He receives a new password.

His account is locked.

He notifies Human Resources.

NEW QUESTION 59
An IoT manufacturer discovers that hackers have injected malware into their devices’ firmware updates. Which of the following methods could the manufacturer use to mitigate this risk?

Ensure that all firmware updates are signed with a trusted certificate

Ensure that all firmware updates are stored using 256-bit encryption

Ensure that firmware updates can only be installed by trusted administrators

Ensure that firmware updates are delivered using Internet Protocol Security (IPSec)

NEW QUESTION 60
A developer needs to apply a family of protocols to mediate network access. Authentication and Authorization has been implemented properly. Which of the following is the missing component?

Management

Accounting

Auditing

Inventory

NEW QUESTION 61
An IoT system administrator wants to mitigate the risk of rainbow table attacks. Which of the following methods or technologies can the administrator implement in order to address this concern?

Enable account lockout

Enable account database encryption

Require frequent password changes

Require complex passwords

NEW QUESTION 62
Accompany collects and stores sensitive data from thousands of IoT devices. The company’s IoT security administrator is concerned about attacks that compromise confidentiality. Which of the following attacks is the security administrator concerned about? (Choose two.)

Salami

Aggregation

Data diddling

Denial of Service (DoS)

Inference

NEW QUESTION 63
In order to successfully perform a man-in-the-middle (MITM) attack against a secure website, which of the following could be true?

Client to server traffic must use Hypertext Transmission Protocol (HTTP)

The server must be vulnerable to malformed Uniform Resource Locator (URL) injection

The server must be using a deprecated version of Transport Layer Security (TLS)

The web server’s X.509 certificate must be compromised

NEW QUESTION 64
Which of the following methods is an IoT portal administrator most likely to use in order to mitigate Distributed Denial of Service (DDoS) attacks?

Implement Domain Name System Security Extensions (DNSSEC) on all Internet-facing name servers

Disable Network Address Translation Traversal (NAT-T) at the border firewall

Implement traffic scrubbers on the upstream Internet Service Provider (ISP) connection

Require Internet Protocol Security (IPSec) for all inbound portal connections

NEW QUESTION 65
Which of the following methods or technologies is most likely to be used in order to mitigate brute force attacks?

Account lockout policy

Automated security logging

Role-based access control

Secure password recovery

Loading …

CertNexus ITS-110 exam is designed to certify professionals who have a deep understanding of Internet of Things (IoT) security principles and practices. ITS-110 exam covers a wide range of topics related to IoT security, including network security, data protection, device security, and risk management. Certified Internet of Things Security Practitioner certification is intended for professionals who are responsible for securing IoT devices and networks, including security analysts, IT professionals, and IoT developers.

CertNexus ITS-110 Real 2023 Braindumps Mock Exam Dumps: https://www.examboosts.com/CertNexus/ITS-110-practice-exam-dumps.html