2024 Latest 100% Exam Passing Ratio – ITS-110 Dumps PDF [Q10-Q32]

5/5 - (1 vote)

2024 Latest 100% Exam Passing Ratio – ITS-110 Dumps PDF

Pass Exam With Full Sureness – ITS-110 Dumps with 102 Questions

CertNexus ITS-110 is a certification exam that is designed to validate the skills and knowledge of individuals who are interested in becoming a Certified Internet of Things (IoT) Security Practitioner. ITS-110 exam is a comprehensive assessment of a candidate’s ability to secure and protect IoT devices, networks, and applications. ITS-110 exam covers a wide range of topics that are essential for securing IoT systems, including risk management, security architecture, and security operations.

QUESTION 10
A web application is connected to an IoT endpoint. A hacker wants to steal data from the connection between them. Which of the following is NOT a method of attack that could be used to facilitate stealing data?

Cross-Site Request Forgery (CSRF)

SQL Injection (SQLi)

Cross-Site Scripting (XSS)

LDAP Injection

QUESTION 11
An IoT system administrator discovers that end users are able to access administrative features on the company’s IoT management portal. Which of the following actions should the administrator take to address this issue?

Implement password complexity policies

Implement granular role-based access

Implement account lockout policies

Implement digitally signed firmware updates

QUESTION 12
An IoT system administrator wants to mitigate the risk of rainbow table attacks. Which of the following methods or technologies can the administrator implement in order to address this concern?

Enable account lockout

Enable account database encryption

Require frequent password changes

Require complex passwords

QUESTION 13
An IoT developer needs to ensure that user passwords for a smartphone app are stored securely. Which of the following methods should the developer use to meet this requirement?

Encrypt all stored passwords using 256-bit Advanced Encryption Standard (AES-256)

Encrypt all stored passwords using 128-bit Twofish

Hash all passwords using Message Digest 5 (MD5)

Store all passwords in read-only memory

QUESTION 14
An IoT security administrator is determining which cryptographic algorithm she should use to sign her server’s digital certificates. Which of the following algorithms should she choose?

Rivest Cipher 6 (RC6)

Rijndael

Diffie-Hellman (DH)

Rivest-Shamir-Adleman (RSA)

QUESTION 15
Passwords should be stored…

For no more than 30 days.

Only in cleartext.

As a hash value.

Inside a digital certificate.

QUESTION 16
A compromised IoT device is initiating random connections to an attacker’s server in order to exfiltrate sensitive dat a. Which type of attack is being used?

Man-in-the-middle (MITM)

SSL session hijack

Reverse shell

Honeypot

QUESTION 17
Which of the following is the BEST encryption standard to implement for securing bulk data?

Triple Data Encryption Standard (3DES)

Advanced Encryption Standard (AES)

Rivest Cipher 4 (RC4)

Elliptic curve cryptography (ECC)

QUESTION 18
An IoT gateway will be brokering data on numerous northbound and southbound interfaces. A security practitioner has the data encrypted while stored on the gateway and encrypted while transmitted across the network. Should this person be concerned with privacy while the data is in use?

Yes, because the hash wouldn’t protect the integrity of the data.

Yes, because the data is vulnerable during processing.

No, since the data is already encrypted while at rest and while in motion.

No, because the data is inside the CPU’s secure region while being used.

QUESTION 19
A hacker is able to extract users’ names, birth dates, height, and weight from an IoT manufacturer’s user portal. Which of the following types of data has been compromised?

Protected health information

Personal health information

Personal identity information

Personally identifiable information

QUESTION 20
An IoT software developer wants the users of her software tools to know if they have been modified by someone other than her. Which of the following tools or techniques should she use?

Encryption

Obfuscation

Hashing

Fuzzing

QUESTION 21
If an attacker were able to gain access to a user’s machine on your network, which of the following actions would she most likely take next?

Start log scrubbing

Escalate privileges

Perform port scanning

Initiate reconnaissance

QUESTION 22
You made an online purchase of a smart watch from a software as a service (SaaS) vendor, and filled out an extensive profile that will help you track several fitness variables. The vendor will provide you with customized health insights based on your profile. With which of the following regulations should the company be compliant? (Choose three.)

Gramm-Leach-Bliley Act (GLBA)

Payment Card Industry Data Security Standard (PCI-DSS)

Federal Information Security Management Act (FISMA)

Sarbanes-Oxley (SOX)

Health Insurance Portability and Accountability Act (HIPAA)

Family Educational Rights and Privacy Act (FERPA)

Federal Energy Regulatory Commission (FERC)

QUESTION 23
An IoT systems administrator wants to ensure that all data stored on remote IoT gateways is unreadable. Which of the following technologies is the administrator most likely to implement?

Secure Hypertext Transmission Protocol (HTTPS)

Internet Protocol Security (IPSec)

Triple Data Encryption Standard (3DES)

Message Digest 5 (MD5)

QUESTION 24
An OT security practitioner wants to implement two-factor authentication (2FA). Which of the following is the least secure method to use for implementation?

Out-of-band authentication (OOBA)

2FA over Short Message Service (SMS)

Authenticator Apps for smartphones

Fast Identity Online (FIDO) Universal 2nd Factor (U2F) USB key

QUESTION 25
An IoT security architect needs to secure data in motion. Which of the following is a common vulnerability used to exploit unsecure data in motion?

External flash access

Misconfigured Secure Sockets Layer (SSL)/Transport Layer Security (TLS)

Databases and datastores

Lack of memory space isolation

QUESTION 26
An IoT system administrator discovers that hackers are using rainbow tables to compromise user accounts on their cloud management portal. What should the administrator do in order to mitigate this risk?

Implement robust password policies

Implement certificates on all login pages

Implement granular role-based access

Implement URL filtering

QUESTION 27
A cloud developer for an IoT service is storing billing information. Which of the following should be considered a common vulnerability in regard to this data that could be used to compromise privacy?

Enabled notifications as required by law

Lack of data retention policies

Authorized access to personal information

Secured data in motion and at rest

QUESTION 28
An IoT security administrator is concerned that someone could physically connect to his network and scan for vulnerable devices. Which of the following solutions should he install to prevent this kind of attack?

Media Access Control (MAC)

Network Access Control (NAC)

Host Intrusion Detection System (HIDS)

Network Intrusion Detection System (NIDS)

QUESTION 29
An IoT integrator wants to deploy an IoT gateway at the Edge and have it connect to the cloud via API. In order to minimize risk, which of the following actions should the integrator take before integration?

Write down the default login and password

Remove all logins and passwords that may exist

Create new credentials using a strong password

Reset the IoT gateway to factory defaults

QUESTION 30
A DevOps engineer wants to provide secure network services to an IoT/cloud solution. Which of the following countermeasures should be implemented to mitigate network attacks that can render a network useless?

Network firewall

Denial of Service (DoS)/Distributed Denial of Service (DDoS) mitigation

Web application firewall (WAF)

Deep Packet Inspection (DPI)

QUESTION 31
In order to gain access to a user dashboard via an online portal, an end user must provide their username, a PIN, and a software token code. This process is known as:

Type 1 authentication

Type 2 authentication

Two-factor authentication

Biometric authentication

QUESTION 32
Which of the following techniques protects the confidentiality of the information stored in databases?

Hashing

Archiving

Monitoring

Encryption

Loading …