2024 Valid ITS-110 FREE EXAM DUMPS QUESTIONS & ANSWERS [Q26-Q44]

QUESTION 26
Requiring randomly generated tokens for each connection from an IoT device to the cloud can help mitigate which of the following types of attacks?

QUESTION 27
An IoT device which allows unprotected shell access via console ports is most vulnerable to which of the following risks?

QUESTION 28
If a site administrator wants to improve the secure access to a cloud portal, which of the following would be the BEST countermeasure to implement?

QUESTION 29
Which of the following attacks relies on the trust that a website has for a user’s browser?

QUESTION 30
An IoT system administrator discovers that end users are able to access administrative features on the company’s IoT management portal. Which of the following actions should the administrator take to address this issue?

QUESTION 31
A hacker wants to record a live session between a user and a host in hopes that parts of the datastream can be used to spoof the session. Which of the following attacks is this person attempting?

QUESTION 32
An IoT developer wants to ensure that data collected from a remotely deployed power station monitoring system is transferred securely to the cloud. Which of the following technologies should the developer consider?

QUESTION 33
A network administrator is looking to implement best practices for the organization’s password policy. Which of the following elements should the administrator include?

QUESTION 34
An IoT systems integrator has a very old IoT gateway that doesn’t offer many security features besides viewing a system configuration page via browser over HTTPS. The systems integrator can’t get their modern browser to bring up the page due to a cipher suite mismatch. Which of the following must the integrator perform before the configuration page can be viewed?

QUESTION 35
An IoT manufacturer needs to ensure that firmware flaws can be addressed even after their devices have been deployed. Which of the following methods should the manufacturer use to meet this requirement?

QUESTION 36
Which of the following is one way to implement countermeasures on an IoT gateway to ensure physical security?

QUESTION 37
A site administrator is not enforcing strong passwords or password complexity. To which of the following types of attacks is this system probably MOST vulnerable?

QUESTION 38
A hacker is able to access privileged information via an IoT portal by modifying a SQL parameter in a URL. Which of the following BEST describes the vulnerability that allows this type of attack?

QUESTION 39
An IoT system administrator discovers that hackers are using rainbow tables to compromise user accounts on their cloud management portal. What should the administrator do in order to mitigate this risk?

QUESTION 40
A developer needs to apply a family of protocols to mediate network access. Authentication and Authorization has been implemented properly. Which of the following is the missing component?

QUESTION 41
Web forms that contain unvalidated fields are vulnerable to which of the following attacks? (Choose two.)

QUESTION 42
An IoT system administrator discovers that unauthorized users are able to log onto and access data on remote IoT monitoring devices. What should the system administrator do on the remote devices in order to address this issue?

QUESTION 43
A developer is coding for an IoT product in the healthcare sector. What special care must the developer take?

QUESTION 44
An IoT developer has endpoints that are shipped to users in the field. Which of the following best practices must be implemented for using default passwords after delivery?