QUESTION 45
Which of the following policies provides the BEST protection against identity theft when data stored on an IoT portal has been compromised?

QUESTION 46
A site administrator is not enforcing strong passwords or password complexity. To which of the following types of attacks is this system probably MOST vulnerable?

QUESTION 47
An IoT security architect needs to secure data in motion. Which of the following is a common vulnerability used to exploit unsecure data in motion?

QUESTION 48
An IoT systems administrator needs to be able to detect packet injection attacks. Which of the follow methods or technologies is the administrator most likely to implement?

QUESTION 49
A developer needs to implement a highly secure authentication method for an IoT web portal. Which of the following authentication methods offers the highest level of identity assurance for end users?

QUESTION 50
A web application is connected to an IoT endpoint. A hacker wants to steal data from the connection between them. Which of the following is NOT a method of attack that could be used to facilitate stealing data?

QUESTION 51
Which of the following methods is an IoT portal administrator most likely to use in order to mitigate Distributed Denial of Service (DDoS) attacks?

QUESTION 52
A web administrator is concerned about injection attacks. Which of the following mitigation techniques should the web administrator implement?

QUESTION 53
A cloud developer for an IoT service is storing billing information. Which of the following should be considered a common vulnerability in regard to this data that could be used to compromise privacy?

QUESTION 54
A hacker is attempting to exploit a known software flaw in an IoT portal in order to modify the site’s administrative configuration. Which of the following BEST describes the type of attack the hacker is performing?

QUESTION 55
A security practitioner wants to encrypt a large datastore. Which of the following is the BEST choice to implement?

QUESTION 56
Web forms that contain unvalidated fields are vulnerable to which of the following attacks? (Choose two.)

QUESTION 57
An IoT security administrator is concerned about an external attacker using the internal device management local area network (LAN) to compromise his IoT devices. Which of the following countermeasures should the security administrator implement? (Choose three.)

QUESTION 58
An IoT systems administrator wants to ensure that all data stored on remote IoT gateways is unreadable. Which of the following technologies is the administrator most likely to implement?

QUESTION 59
An IoT system administrator discovers that hackers are using rainbow tables to compromise user accounts on their cloud management portal. What should the administrator do in order to mitigate this risk?

QUESTION 60
Which of the following items should be part of an IoT software company’s data retention policy?

QUESTION 61
Which of the following methods or technologies is most likely to be used to protect an IoT portal against protocol fuzzing?

QUESTION 62
An IoT manufacturer wants to ensure that their web-enabled cameras are secured against brute force password attacks. Which of the following technologies or protocols could they implement?