Objective 3.1 Identify Common Threats Used to Exploit Unsecure Network Services. CERTIFIED-IOT-SECURITY-PRACTITIONER Practice Questions (Page 2)

Questions 6–10

1. 6expert · medium

   A security engineer is evaluating the risk of using UDP-based protocols in a new IoT deployment. The engineer is concerned about both spoofing and flooding attacks. Which characteristic of UDP makes it particularly vulnerable to these attacks?

   • AUDP is connectionless and does not maintain state, making it easy to spoof and flood
   • BUDP uses a three-way handshake that can be exploited for amplification
   • CUDP is encrypted by default, which hides malicious traffic from security monitoring
   • DUDP has a larger header than TCP, making it easier to inject malicious data
   Reveal Solution Discussion Select an answer first
2. 7expert · medium

   A security consultant is assessing a smart factory that uses Bluetooth Low Energy (BLE) for asset tracking. The consultant discovers that an attacker can spoof the MAC address of a BLE tag to impersonate a legitimate asset, causing the tracking system to report false locations. Which type of attack is this?

   • AIP address spoofing to impersonate a trusted server
   • BA buffer overflow attack to crash the tracking system
   • CA DoS attack to overwhelm the tracking system
   • DMAC address spoofing to impersonate a trusted endpoint
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which networking protocol is commonly used in IoT devices and is known for its lightweight design but can be vulnerable to spoofing if not properly secured?

   • AMQTT
   • BHTTP
   • CFTP
   • DSMTP
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A security analyst is investigating a DDoS attack on a smart city's traffic light control system. The attacker uses a botnet of compromised IoT devices to send a high volume of UDP packets to the control server. Which type of attack is this?

   • AA buffer overflow attack that crashes the control server
   • BA denial-of-service (DoS) attack using a single source
   • CA UPnP attack that opens ports on the control server
   • DA distributed denial-of-service (DDoS) attack using UDP flooding
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A security analyst discovers that an internal IoT device with a web interface is accessible from the internet. The device is behind a firewall that has no explicit port-forwarding rules. Which attack technique most likely exposed the device?

   • AThe attacker spoofed the device's MAC address to bypass the firewall's MAC filtering
   • BThe attacker used a UDP flood to overwhelm the firewall and allow traffic through
   • CThe attacker exploited a buffer overflow in the firewall's web interface to disable the firewall
   • DThe attacker used UPnP to automatically create a port-forwarding rule on the firewall
   Reveal Solution Discussion Select an answer first