Objective 6.1 Identify Common Threats Used to Exploit Unsecure Software/firmware. CERTIFIED-IOT-SECURITY-PRACTITIONER Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which security mechanism is designed to prevent unauthorized code from running during the boot process?

   • AFirewall
   • BIntrusion detection system
   • CSecure boot
   • DAntivirus software
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which vulnerability is most directly caused by a developer failing to validate the length of input before copying it into a fixed-size memory buffer?

   • ALogic error
   • BSQL injection
   • CBuffer overflow
   • DDenial of service
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Which scenario best illustrates the security risk of lacking OTA updates?

   • AA vendor discovers a critical vulnerability but cannot remotely patch devices in the field
   • BA device stores its encryption keys in a world-readable file
   • CA device's bootloader does not verify the signature of the firmware
   • DA device uses a weak encryption algorithm for network traffic
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A hospital uses a fleet of infusion pumps that were deployed five years ago. The vendor has released critical security patches for a known vulnerability, but the pumps cannot receive updates over the network and require a physical technician to update each device manually. The hospital's security team is concerned about the window of exposure. Which primary risk does this situation highlight?

   • ALack of OTA updates leaves known vulnerabilities unpatched for extended periods
   • BConstrained devices lack encryption capabilities
   • CFirmware contains sensitive information that can be extracted
   • DUnsecure update mechanism allows malicious firmware injection
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   An attacker extracts the firmware from an IoT device and finds a hardcoded Wi-Fi password. Which risk does this scenario illustrate?

   • AFirmware containing sensitive information
   • BUnsecure bootloader
   • CLack of OTA updates
   • DUnsigned firmware
   Reveal Solution Discussion Select an answer first