IoT Security Chapter 3 Quiz

Which type of vulnerability is present when a programmer does not account for the size of the input that a user might enter?

• buffer overflow

• backdoor installation

• denial of service

• out of date firmware

Which type of memory media would provide space to store collected data in an IoT device?

• EPROM

• SD card

• DRAM

• SRAM

Which two pieces of information are needed to search for an IoT device in the FCC ID database? (Choose two.)

• grantee code

• IP address

• product description

• product code

Which type of attack takes advantage of vulnerabilities in servers to grant unauthorized users higher than approved levels of access?

• privilege escalation

• default login

• buffer overflow

• backdoor installation

Which type of technology is classified as embedded software that includes a minimal operating system for controlling an IoT device?

• microprocessor

• microcontroller

• firmware

• SD card

Which two programming languages are examples of compiled languages? (Choose two.)

• PHP

• Java

• C

• Perl

What is a key difference between an embedded device and a prototyping device?

• An embedded device is programmed for one specific purpose, whereas a prototyping device is designed to perform different functions.

• An embedded device does not contain an operating system, whereas a prototyping device does.

• An embedded device does not connect to the internet, whereas a prototyping device does.

• An embedded device uses removable media to hold the programming code, whereas a prototyping device uses a hard disk to hold the programming code.

Which two commercial IoT operating systems support processors from multiple manufacturers? (Choose two.)

• ARM Mbed

• Android Embedded

• Busybox

• VxWorks

• Windows 10 IoT Core

Which two scripting languages are designed to be executed directly under an operating system? (Choose two.)

• PHP

• PowerShell

• shell script

• Python

• JavaScript

An administrator wants to implement an access control model that makes access decisions based on the role and responsibilities of an individual within an organization. Which access control model best addresses this requirement?

• attribute-based

• role-based

• mandatory

• discretionary