IOT SECURITY 1st

What process is used by blockchain technology to validate transactions?

• • scope of work

• • digital signatures

• • synchronous key encryption

• • proof of work

Which programming language is an example of an interpreted language?

• • C#

• • Java

• Python

• • C

Which DFD symbol represents data output from sensing, actuating, traffic forwarding, analysis, and control systems?

• • external entity

• • data flow

• • data store

• process

What are three items that should be included in the documentation describing the components of the IoT system at each layer? (Choose three.)

• applications

• devices

• communications network

• • protocols

• • technologies

According to the National Initiative for Cybersecurity Education (NICE) Cybersecurity Workforce Framework by NIST, which work role in the risk management specialty area conducts comprehensive assessments of the management, operational, and technical security controls to determine their overall effectiveness?

• • Security Architect

• • Security Control Assessor

• • Vulnerability Assessment Analyst

• • Secure Software Assessor

A threat actor has used malicious commands to trick the database into returning unauthorized records and other data. Which web front-end vulnerability is the threat actor exploiting?

• • cross-site scripting

• • broken authentication

• • security misconfiguration

• SQL injections

According to the National Initiative for Cybersecurity Education (NICE) Cybersecurity Workforce Framework by NIST, which work role in the Vulnerability Assessment and Management specialty area performs assessments of IT systems and identifies where those systems deviate from acceptable configurations or policy?

• Vulnerabiliry Assessment Analyst

• • Secure Software Assessor

• • Security Architect

• • Security Control Assessor

In a typical smart home setup, which two devices directly share the cable signal from the local cable service provider? (Choose two.)

• TV

• cable modem

• • home gateway

• • MCU or SBC board

• • smart thermostat

What are two OWASP communication layer vulnerabilities commonly found when securing the IoT device network services attack surface? (Choose two.)

• poorly implemented encryption

• • LAN traffic

• lack of payload verification

• • nonstandard protocols

• • protocol fuzzing

Which statement describes a security vulnerability of using a medical device on a legacy computer system in a hospital?

• • The hard disk may become full.

• The OS of the PC may not receive up-to-date security patches.

• • The CPU may become too slow for the medical application

• • The memory may become the bottleneck for performance