ITS-110 by CertNexus Actual Free Exam Questions And Answers

Question 1

An IoT systems integrator has a very old IoT gateway that doesn't offer many security features besides viewing a system configuration page via browser over HTTPS. The systems integrator can't get their modern browser to bring up the page due to a cipher suite mismatch. Which of the following must the integrator perform before the configuration page can be viewed?

A. Upgrade the browser, as modern browsers have stopped allowing connections to hosts that use only outdated cipher suites.

B. Downgrade the browser, as modern browsers have stopped allowing connections to hosts that use only outdated cipher suites.

C. Upgrade the browser, as older browsers have stopped allowing connections to hosts that use only outdated cipher suites.

D. Downgrade the browser, as modern browsers have continued allowing connections to hosts that use only outdated cipher suites.

Discussion 0

Correct Answer: C Vote an answer

Question 2

You work for an IoT software-as-a-service (SaaS) provider. Your boss has asked you to research a way to effectively dispose of stored sensitive customer dat a. Which of the following methods should you recommend to your boss?

A. Overwriting

B. Physical destruction

C. Degaussing

D. Crypto-shredding

Discussion 0

Correct Answer: B Vote an answer

Question 3

If an attacker were able to gain access to a user's machine on your network, which of the following actions would she most likely take next?

A. Initiate reconnaissance

B. Escalate privileges

C. Start log scrubbing

D. Perform port scanning

Discussion 0

Correct Answer: A Vote an answer

Question 4

An Agile Scrum Master working on IoT solutions needs to get software released for a new IoT product. Since bugs could be found after deployment, which of the following should be part of the overall solution?

A. Free firmware updates if the product is sent back to the manufacturer

B. Over-the-Air (OTA) software updates

C. A money back guarantee, no questions asked

D. A lifetime transferable warranty

Discussion 0

Correct Answer: B Vote an answer

Question 5

Which of the following is the BEST encryption standard to implement for securing bulk data?

A. Advanced Encryption Standard (AES)

B. Elliptic curve cryptography (ECC)

C. Rivest Cipher 4 (RC4)

D. Triple Data Encryption Standard (3DES)

Discussion 0

Correct Answer: A Vote an answer

Question 6

Which of the following methods is an IoT portal administrator most likely to use in order to mitigate Distributed Denial of Service (DDoS) attacks?

A. Implement Domain Name System Security Extensions (DNSSEC) on all Internet-facing name servers

B. Disable Network Address Translation Traversal (NAT-T) at the border firewall

C. Require Internet Protocol Security (IPSec) for all inbound portal connections

D. Implement traffic scrubbers on the upstream Internet Service Provider (ISP) connection

Discussion 0

Correct Answer: D Vote an answer

Question 7

An IoT security administrator is determining which cryptographic algorithm she should use to sign her server's digital certificates. Which of the following algorithms should she choose?

A. Rivest-Shamir-Adleman (RSA)

B. Rivest Cipher 6 (RC6)

C. Diffie-Hellman (DH)

D. Rijndael

Discussion 0

Correct Answer: A Vote an answer

Question 8

A software developer for an IoT device company is creating software to enhance the capabilities of his company's security cameras. He wants the end users to be confident that the software they are downloading from his company's support site is legitimate. Which of the following tools or techniques should he utilize?

A. Digital certificate

B. Data validation

C. Pseudocode

D. Interrupt analyzer

Discussion 0

Correct Answer: A Vote an answer

Question 9

An IoT device has many sensors on it and that sensor data is sent to the cloud. An IoT security practitioner should be sure to do which of the following in regard to that sensor data?

A. Collect only the minimum amount of data required to perform all the business functions.

B. The amount or type of data collected isn't important if you implement proper authorization controls.

C. The amount or type of data collected isn't important if you have a properly secured IoT device.

D. Collect as much data as possible so as to maximize potential value of the new IoT use-case.

Discussion 0

Correct Answer: A Vote an answer

CertNexus Certified Internet of Things Security Practitioner - ITS-110 Exam Practice Test

Contact Us

Useful Links

Latest Updated