Why are debug ports on IoT devices considered a security risk?

They broadcast the device's Wi-Fi password

They enable attackers to disassemble the device

They allow attackers to remove the device's storage

They may provide unrestricted shell access to the device

A security engineer is evaluating a new IoT device for deployment. The device has a plastic case that can be opened with a prying tool, and the firmware is stored on a removable eMMC chip. The engineer is concerned about firmware extraction and reverse engineering. Which mitigation would be the most effective to protect the firmware?

Enable secure boot and encrypt the firmware

Remove the eMMC chip from the device

Store the firmware only in the cloud

Use a stronger adhesive to seal the case

What is a potential attack that becomes possible after an IoT device is disassembled?

Firmware extraction from the flash memory

Removing the SD card to read data

Accessing the console port for a shell

Connecting a USB keyboard to inject commands

A research lab uses IoT sensors that store experimental data on microSD cards. The sensors are deployed in a field that is accessible to the public. The lab's security policy requires that data be protected even if a sensor is stolen. Which control would best meet this requirement?

Require a password to access the sensor's configuration

Place the sensors in a locked enclosure

Encrypt the data on the microSD cards

Use tamper-evident seals on the sensors

CertNexusCertified IoT Security Practitioner (CIoTSP)

Domain 7Objective 1

Objective 7.1 Identify Common Threats Used to Exploit Poor Physical Security. CERTIFIED-IOT-SECURITY-PRACTITIONER Practice Questions (Page 4)

Part of the 7.0 Enhancing Physical Security domain, which accounts for 7% of the CERTIFIED-IOT-SECURITY-PRACTITIONER exam.

21questions here

5free pages

5concepts

7%of the exam

Questions 16–20

16foundation · easy
Why are debug ports on IoT devices considered a security risk?
Select an answer first
17expert · hard
A security engineer is evaluating a new IoT device for deployment. The device has a plastic case that can be opened with a prying tool, and the firmware is stored on a removable eMMC chip. The engineer is concerned about firmware extraction and reverse engineering. Which mitigation would be the most effective to protect the firmware?
Select an answer first
18foundation · easy
What is a potential attack that becomes possible after an IoT device is disassembled?
Select an answer first
19foundation · easy
An attacker gains physical access to an IoT device and replaces its firmware with malicious code. Which threat does this illustrate?
Select an answer first
20expert · hard
A research lab uses IoT sensors that store experimental data on microSD cards. The sensors are deployed in a field that is accessible to the public. The lab's security policy requires that data be protected even if a sensor is stolen. Which control would best meet this requirement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CERTIFIED-IOT-SECURITY-PRACTITIONER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CertNexus. “CERTIFIED-IOT-SECURITY-PRACTITIONER” is a trademark of its owner, used for identification only.

Objective 7.1 Identify Common Threats Used to Exploit Poor Physical Security. CERTIFIED-IOT-SECURITY-PRACTITIONER Practice Questions (Page 4)

Questions 16–20

Why are debug ports on IoT devices considered a security risk?

What is a potential attack that becomes possible after an IoT device is disassembled?

An attacker gains physical access to an IoT device and replaces its firmware with malicious code. Which threat does this illustrate?

A research lab uses IoT sensors that store experimental data on microSD cards. The sensors are deployed in a field that is accessible to the public. The lab's security policy requires that data be protected even if a sensor is stolen. Which control would best meet this requirement?

Keep studying — 7.0 Enhancing Physical Security