IoT Security Chapter 2 Quiz

Which layer of the OSI model contains protocols used for process-to-process communications?

• application

• transport

• data link

• physical

What are the three broad requirements specified by the CIA security triad?

• Data must be protected from firmware alteration.

• Data must be protected from theft and unauthorized alteration or destruction.

• Data must be protected from unauthorized access.

• Data must always be accessible by the people who need to use it when they need to use it.

What is the primary focus of data management in the IoT realm?

• when and where data is processed

• which data protocols are used

• how things are connected to the networks

• what applications are being used

What is the function of the DREAD tool?

• It is used to mitigate threats.

• It is used to identify threats.

• It is used to rate threats.

• It is used to prevent threats from attacking the system.

What is a function that is provided by the network layer of the OSI model?

• directing data packets to destination hosts on other networks

• placing data on the network medium

• exchanging frames between devices

• segmenting, transferring, and reassembling data

Which level of the IoT reference model converts data into information that is suitable for storage and higher level processing?

• application

• data abstraction

• fog computing

• data accumulation

Which function is provided by the data abstraction level of the IoT reference model?

• to enable data in motion to be converted to data at rest

• to transcend multiple applications to include the communication and collaboration required between people and processes

• to render data and data storage in ways that enable application development

• to interpret information based on the nature of the device data and business needs

Match the category to the security objective of the Threat Model Analysis of an IoT System.

• privacy and regulation

• availability guarantees

• financial

• reputation

Which task in the step of decomposing the IoT system gathers information about approaches to input validation, authentication, authorization, configuration, and any other areas of the IoT system that are vulnerable?

• Identify trust boundaries.

• Identify entry points.

• Document the security profile.

• Identify privileged code.

Which task in the step of decomposing the IoT system gathers information where secure resources are stored and manipulated to see who has elevated rights?

• Identify sensitive data.

• Identify data flow.

• Identify trust boundaries.

• Identify entry points.