Objective 6.1 Identify Common Threats Used to Exploit Unsecure Software/firmware. CERTIFIED-IOT-SECURITY-PRACTITIONER Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which storage location is considered more secure for cryptographic keys on an IoT device?

   • AThe device's flash memory without encryption
   • BA hardware security module (HSM)
   • CA plaintext configuration file
   • DA world-readable directory
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A manufacturer of smart doorbells ships firmware updates as plain binary files. The bootloader does not verify a digital signature before flashing the new firmware. An attacker gains access to the vendor's update server and replaces the legitimate firmware with a malicious version. When the doorbell downloads and installs the update, it runs the attacker's code. Which two weaknesses are directly exploited?

   • APoorly designed software and lack of end-to-end solution
   • BLack of OTA updates and constrained device
   • CFirmware contains sensitive information and unsecure key storage
   • DUnsigned firmware and unsecure bootloader
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A developer for a wearable health device stores the device's private signing key in a file called 'key.txt' in the firmware's root filesystem. The firmware is distributed to users, and an attacker extracts the key. What is the most direct security impact?

   • AThe attacker can decrypt all data transmitted by the device
   • BThe attacker can bypass the device's authentication mechanism
   • CThe attacker can sign malicious firmware updates that the device will accept
   • DThe attacker can extract personal health data from the device
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the main security risk of a bootloader that does not verify the integrity of the firmware before executing it?

   • AThe device will boot faster
   • BThe firmware will be encrypted automatically
   • CThe device will not be able to connect to the network
   • DUnauthorized code can be executed during the boot process
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A smart building system uses sensors that communicate with a local gateway via Zigbee, the gateway sends data to a cloud backend over TLS, and the backend stores data in a database. The Zigbee communication is unencrypted and unauthenticated. An attacker exploits this to inject false temperature readings that cause the HVAC system to malfunction. Which statement best describes the root cause?

   • AThe gateway should have used a different wireless protocol
   • BThe Zigbee protocol is inherently insecure and cannot be fixed
   • CThe cloud backend should have rejected the false readings
   • DThe lack of end-to-end security creates a gap between the sensor and the gateway
   Reveal Solution Discussion Select an answer first