Objective 4.1 Identify Common Threats Used to Exploit Unsecure Data. CERTIFIED-IOT-SECURITY-PRACTITIONER Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which threat involves an attacker gaining unauthorized access to a database that stores IoT device configuration files, allowing them to read or modify the data?

   • ADenial-of-service attack
   • BUnauthorized access
   • CMemory scraping
   • DPacket sniffing
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   An attacker uses a tool to capture and analyze network traffic passing over an unencrypted Wi-Fi network used by smart home devices. Which type of threat is this?

   • AMalware infection
   • BPhysical theft
   • CBrute-force attack
   • DPacket sniffing
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   An attacker monitors the power consumption of an IoT device to infer secret cryptographic keys while the device is performing encryption. Which type of threat is this?

   • AData breach
   • BMan-in-the-middle attack
   • CSide-channel attack
   • DPhishing attack
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A point-of-sale (POS) system in a retail store is infected with malware that captures credit card numbers while the payment application is processing them in memory. The malware does not intercept network traffic or access the local hard drive. Which type of threat is being used?

   • APhysical theft
   • BMan-in-the-middle attack
   • CMemory scraping
   • DPacket sniffing
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A hospital is deploying a new IoT device that stores patient data locally on a removable SD card. The device also transmits data to a central server over a network. A security consultant is asked to identify the most critical threat to the data. The consultant determines that the device is often left unattended in public areas. Which threat should the consultant prioritize?

   • APhysical theft of the SD card
   • BMan-in-the-middle attack on the network
   • CMemory scraping during processing
   • DEavesdropping on the network transmission
   Reveal Solution Discussion Select an answer first