最新的CertNexus ITS-110免費考試真題

問題1

A hacker was able to generate a trusted certificate that spoofs an IoT-enabled security camera's management portal. Which of the following is the most likely cause of this exploit?

A. Firmware is loaded from flash using unsecure object references

B. The portal's certificate is stored in unsecure flash memory

C. X.509 private keys are stored in unsecure flash memory

D. Bootloader code is stored in unsecure flash memory

正確答案: C

問題2

An OT security practitioner wants to implement two-factor authentication (2FA). Which of the following is the least secure method to use for implementation?

A. Authenticator Apps for smartphones

B. 2FA over Short Message Service (SMS)

C. Fast Identity Online (FIDO) Universal 2nd Factor (U2F) USB key

D. Out-of-band authentication (OOBA)

正確答案: B

問題3

A developer needs to implement a highly secure authentication method for an IoT web portal. Which of the following authentication methods offers the highest level of identity assurance for end users?

A. Multi-factor authentication with three factors

B. Two-step authentication with complex passwords

C. A hardware-based token generation device

D. An X.509 certificate stored on a smart card

正確答案: A

問題4

What is one popular network protocol that is usually enabled by default on home routers that creates a large attack surface?

A. Open virtual private network (VPN)

B. Network Address Translation (NAT)

C. Universal Plug and Play (UPnP)

D. Domain Name System Security Extensions (DNSSEC)

正確答案: C

問題5

A hacker wants to discover login names that may exist on a website. Which of the following responses to the login and password entries would aid in the discovery? (Choose two.)

A. The username and/or password are incorrect

B. That user does not exist

C. Your login attempt was unsuccessful

D. Invalid password

E. Incorrect email/password combination

正確答案: B,C

問題6

If a site administrator wants to improve the secure access to a cloud portal, which of the following would be the BEST countermeasure to implement?

A. Mandate multi-factor authentication (MFA)

B. Require separation of duties

C. Utilize role-based access control (RBAC)

D. Require frequent password changes

正確答案: C

問題7

A manufacturer wants to ensure that user account information is isolated from physical attacks by storing credentials off-device. Which of the following methods or technologies best satisfies this requirement?

A. Password Authentication Protocol (PAP)

B. Remote Authentication Dial-In User Service (RADIUS)

C. Border Gateway Protocol (BGP)

D. Role-Based Access Control (RBAC)

正確答案: B

問題8

A cloud developer for an IoT service is storing billing information. Which of the following should be considered a common vulnerability in regard to this data that could be used to compromise privacy?

A. Enabled notifications as required by law

B. Lack of data retention policies

C. Authorized access to personal information

D. Secured data in motion and at rest

正確答案: C

問題9

Which of the following methods or technologies is most likely to be used in order to mitigate brute force attacks?

A. Account lockout policy

B. Automated security logging

C. Secure password recovery

D. Role-based access control

正確答案: A

問題10

In order to successfully perform a man-in-the-middle (MITM) attack against a secure website, which of the following could be true?

A. The server must be vulnerable to malformed Uniform Resource Locator (URL) injection

B. The web server's X.509 certificate must be compromised

C. The server must be using a deprecated version of Transport Layer Security (TLS)

D. Client to server traffic must use Hypertext Transmission Protocol (HTTP)

正確答案: C

最新的CertNexus Certified Internet of Things Security Practitioner - ITS-110免費考試真題

聯系我們

站內鏈接

最新更新