Free ITS-110 Exam Braindumps – New 2024 CertNexus Pratice Exam [Q40-Q58]

Q40. A hacker is able to access privileged information via an IoT portal by modifying a SQL parameter in a URL. Which of the following BEST describes the vulnerability that allows this type of attack?

Q41. An IoT software developer strives to reduce the complexity of his code to allow for efficient design and implementation. Which of the following terms describes the design principle he is implementing?

Q42. An IoT system administrator discovers that end users are able to access administrative features on the company’s IoT management portal. Which of the following actions should the administrator take to address this issue?

Q43. Which of the following methods or technologies is most likely to be used in order to mitigate brute force attacks?

Q44. Which of the following methods or technologies is most likely to be used to protect an IoT portal against protocol fuzzing?

Q45. A web administrator is concerned about injection attacks. Which of the following mitigation techniques should the web administrator implement?

Q46. A hacker enters credentials into a web login page and observes the server’s responses. Which of the following attacks is the hacker attempting?

Q47. An IoT developer has endpoints that are shipped to users in the field. Which of the following best practices must be implemented for using default passwords after delivery?

Q48. An IoT security administrator realizes that when he attempts to visit the administrative website for his devices, he is sent to a fake website. To which of the following attacks has he likely fallen victim?

Q49. Which of the following techniques protects the confidentiality of the information stored in databases?

Q50. A site administrator is not enforcing strong passwords or password complexity. To which of the following types of attacks is this system probably MOST vulnerable?

Q51. An IoT gateway will be brokering data on numerous northbound and southbound interfaces. A security practitioner has the data encrypted while stored on the gateway and encrypted while transmitted across the network. Should this person be concerned with privacy while the data is in use?

Q52. An IoT security architect wants to implement Bluetooth between two nodes. The Elliptic Curve Diffie-Hellman (ECDH) cipher suite has been identified as a requirement. Which of the following Bluetooth versions can meet this requirement?

Q53. An IoT software developer wants the users of her software tools to know if they have been modified by someone other than her. Which of the following tools or techniques should she use?

Q54. Accompany collects and stores sensitive data from thousands of IoT devices. The company’s IoT security administrator is concerned about attacks that compromise confidentiality. Which of the following attacks is the security administrator concerned about? (Choose two.)

Q55. A compromised IoT device is initiating random connections to an attacker’s server in order to exfiltrate sensitive dat a. Which type of attack is being used?

Q56. In order to gain access to a user dashboard via an online portal, an end user must provide their username, a PIN, and a software token code. This process is known as:

Q57. An embedded engineer wants to implement security features to be sure that the IoT gateway under development will only load verified images. Which of the following countermeasures could be used to achieve this goal?

Q58. An OT security practitioner wants to implement two-factor authentication (2FA). Which of the following is the least secure method to use for implementation?