Objective 7.1 Identify Common Threats Used to Exploit Poor Physical Security. CERTIFIED-IOT-SECURITY-PRACTITIONER Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following is a common method attackers use to exploit physical ports on an IoT device?

   • APlugging a USB rubber ducky to execute keystrokes
   • BSpraying the device with compressed air
   • CRemoving the device from the wall
   • DUsing a magnet to corrupt the hard drive
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A security engineer is reviewing a building automation controller that has an exposed RS-232 console port on its front panel. The port is enabled by default and accepts commands without authentication. The engineer cannot disable the port because the vendor's firmware does not support that option. Which additional control would best reduce the risk of unauthorized command execution through this port?

   • ADisable the RS-232 port in the operating system's device manager
   • BPlace the controller in a locked enclosure with restricted key access
   • CSet a strong password on the controller's web management interface
   • DConfigure the controller's network interface to use a stronger encryption protocol
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   An attacker removes an SD card from a smart camera to read the recorded footage. Which physical security threat does this illustrate?

   • AUnprotected shell access
   • BPhysical port access
   • CStorage media theft
   • DDevice disassembly
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A utility company deploys smart meters on the exterior of residential buildings. The meters have a diagnostic button that, when pressed, places the device into a maintenance mode with elevated privileges. A security consultant notes that the button is recessed but not locked. Which threat is most directly enabled by this design?

   • AAn attacker could press the button to gain unauthorized configuration access
   • BAn attacker could use the button to trigger a denial-of-service on the network
   • CAn attacker could remove the meter and extract the firmware via chip-off
   • DAn attacker could intercept wireless communications between the meter and the utility
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is a common consequence of unrestricted physical access to an IoT device?

   • AUnauthorized modification of device settings
   • BThe device automatically updates its firmware
   • CThe device becomes immune to malware
   • DThe device's network speed increases
   Reveal Solution Discussion Select an answer first