A health app shares user heart rate data after replacing names with random IDs, but includes the user's ZIP code and birth date. What privacy risk is most likely?

Re-identification of individuals through quasi-identifiers

Unauthorized access to personal information

Lack of data retention policies

A utility company uses smart meters that send energy usage data to a collector over a wireless mesh network. The data is sent in plaintext, and the mesh network uses a shared key that is hardcoded in all meters. An attacker with physical access to one meter extracts the key. What is the most likely privacy impact?

The attacker can cause a denial of service by flooding the network.

The attacker can decrypt or inject traffic on the mesh network, potentially accessing usage data from other meters.

The attacker can modify the meter's firmware to collect more data.

The attacker can only access data from the single meter they physically accessed.

A smart city traffic system publishes location data with only the device ID removed, but timestamps and exact GPS coordinates remain. What privacy threat does this create?

Lack of proper data anonymization

Unauthorized access to personal information

Collection of unnecessary personal information

A smart doorbell stores video recordings on its internal memory card in plaintext. What privacy threat does this represent?

Collection of unnecessary personal information

A smart speaker manufacturer stores voice recordings indefinitely because there is no policy for deleting them. What privacy risk does this create?

Data is anonymized automatically

Data is kept longer than necessary, increasing exposure if breached

CertNexusCertified IoT Security Practitioner (CIoTSP)

Domain 5Objective 1

Objective 5.1 Identify Common Threats Used to Compromise Privacy. CERTIFIED-IOT-SECURITY-PRACTITIONER Practice Questions (Page 3)

Part of the 5.0 Addressing Privacy Concerns domain, which accounts for 12% of the CERTIFIED-IOT-SECURITY-PRACTITIONER exam.

21questions here

5free pages

6concepts

12%of the exam

Questions 11–15

11foundation · easy
A health app shares user heart rate data after replacing names with random IDs, but includes the user's ZIP code and birth date. What privacy risk is most likely?
Select an answer first
12application · medium
A utility company uses smart meters that send energy usage data to a collector over a wireless mesh network. The data is sent in plaintext, and the mesh network uses a shared key that is hardcoded in all meters. An attacker with physical access to one meter extracts the key. What is the most likely privacy impact?
Select an answer first
13foundation · easy
A smart city traffic system publishes location data with only the device ID removed, but timestamps and exact GPS coordinates remain. What privacy threat does this create?
Select an answer first
14foundation · easy
A smart doorbell stores video recordings on its internal memory card in plaintext. What privacy threat does this represent?
Select an answer first
15foundation · easy
A smart speaker manufacturer stores voice recordings indefinitely because there is no policy for deleting them. What privacy risk does this create?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CERTIFIED-IOT-SECURITY-PRACTITIONER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CertNexus. “CERTIFIED-IOT-SECURITY-PRACTITIONER” is a trademark of its owner, used for identification only.