[Feb 24, 2023] Download Free CertNexus ITS-110 Real Exam Questions [Q42-Q64]

Q42. A hacker wants to record a live session between a user and a host in hopes that parts of the datastream can be used to spoof the session. Which of the following attacks is this person attempting?

Q43. Which of the following describes the most significant risk created by implementing unverified certificates on an IoT portal?

Q44. An IoT developer wants to ensure that data collected from a remotely deployed power station monitoring system is transferred securely to the cloud. Which of the following technologies should the developer consider?

Q45. An IoT developer wants to ensure all sensor to portal communications are as secure as possible and do not require any client-side configuration. Which of the following is the developer most likely to use?

Q46. You made an online purchase of a smart watch from a software as a service (SaaS) vendor, and filled out an extensive profile that will help you track several fitness variables. The vendor will provide you with customized health insights based on your profile. With which of the following regulations should the company be compliant? (Choose three.)

Q47. You work for a business-to-consumer (B2C) IoT device company. Your organization wishes to publish an annual report showing statistics related to the volume and variety of sensor data it collects. Which of the following should your organization do prior to using this information?

Q48. The network administrator for an organization has read several recent articles stating that replay attacks are on the rise. Which of the following secure protocols could the administrator implement to prevent replay attacks via remote workers’ VPNs? (Choose three.)

Q49. Which of the following methods or technologies is most likely to be used to protect an IoT portal against protocol fuzzing?

Q50. An IoT gateway will be brokering data on numerous northbound and southbound interfaces. A security practitioner has the data encrypted while stored on the gateway and encrypted while transmitted across the network. Should this person be concerned with privacy while the data is in use?

Q51. An IoT system administrator discovers that hackers are using rainbow tables to compromise user accounts on their cloud management portal. What should the administrator do in order to mitigate this risk?

Q52. An IoT security administrator is concerned that someone could physically connect to his network and scan for vulnerable devices. Which of the following solutions should he install to prevent this kind of attack?

Q53. In order to gain access to a user dashboard via an online portal, an end user must provide their username, a PIN, and a software token code. This process is known as:

Q54. A security practitioner wants to encrypt a large datastore. Which of the following is the BEST choice to implement?

Q55. What is one popular network protocol that is usually enabled by default on home routers that creates a large attack surface?

Q56. A hacker is able to extract users’ names, birth dates, height, and weight from an IoT manufacturer’s user portal. Which of the following types of data has been compromised?

Q57. A manufacturer wants to ensure that user account information is isolated from physical attacks by storing credentials off-device. Which of the following methods or technologies best satisfies this requirement?

Q58. An IoT security administrator wants to encrypt the database used to store sensitive IoT device dat a. Which of the following algorithms should he choose?

Q59. Which of the following policies provides the BEST protection against identity theft when data stored on an IoT portal has been compromised?

Q60. A site administrator is not enforcing strong passwords or password complexity. To which of the following types of attacks is this system probably MOST vulnerable?

Q61. If a site administrator wants to improve the secure access to a cloud portal, which of the following would be the BEST countermeasure to implement?

Q62. Which of the following tools or techniques is used by software developers to maintain code, but also used by hackers to maintain control of a compromised system?

Q63. A web administrator is concerned about injection attacks. Which of the following mitigation techniques should the web administrator implement?

Q64. A developer is coding for an IoT product in the healthcare sector. What special care must the developer take?