What is the purpose of an account lockout policy?

To change the user's password automatically

To permanently delete user accounts

To temporarily disable an account after multiple failed login attempts

To notify the user of a successful login

What is the primary role of security logging in an IoT system?

To provide a record of events for forensic analysis and incident detection

What is a key benefit of security monitoring?

Early detection of security incidents

Guaranteeing that no attacks will succeed

Eliminating the need for encryption

Automatically patching all vulnerabilities

What is the principle of least privilege?

Granting all users the same permissions

Granting users the minimum permissions necessary to perform their job

Granting users permissions based on their personal requests

Granting users permissions based on their seniority

A smart agriculture company stores sensor data in a database that is accessible from the internet. The database uses default credentials (admin/admin). An attacker scans the internet, finds the database, and logs in using the default credentials. Which of the following is the most effective immediate action?

Change the default credentials to strong, unique credentials and restrict access to the database to only authorized IP addresses.

Add an audit log to the database.

Encrypt the data in the database.

Disable the database's internet-facing interface.

CertNexusCertified IoT Security Practitioner (CIoTSP)

Domain 2Objective 1

Objective 2.1 Identify Common Threats Used to Exploit Weak Authentication/authorization Schemes. CERTIFIED-IOT-SECURITY-PRACTITIONER Practice Questions (Page 5)

Part of the 2.0 Implementing Authentication, Authorization, and Accounting domain, which accounts for 14% of the CERTIFIED-IOT-SECURITY-PRACTITIONER exam.

38questions here

8free pages

11concepts

14%of the exam

Questions 21–25

21foundation · easy
What is the purpose of an account lockout policy?
Select an answer first
22foundation · easy
What is the primary role of security logging in an IoT system?
Select an answer first
23foundation · easy
What is a key benefit of security monitoring?
Select an answer first
24foundation · easy
What is the principle of least privilege?
Select an answer first
25application · medium
A smart agriculture company stores sensor data in a database that is accessible from the internet. The database uses default credentials (admin/admin). An attacker scans the internet, finds the database, and logs in using the default credentials. Which of the following is the most effective immediate action?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CERTIFIED-IOT-SECURITY-PRACTITIONER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CertNexus. “CERTIFIED-IOT-SECURITY-PRACTITIONER” is a trademark of its owner, used for identification only.