Objective 2.1 Identify Common Threats Used to Exploit Weak Authentication/authorization Schemes. CERTIFIED-IOT-SECURITY-PRACTITIONER Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   After a security incident, a forensic investigator needs to determine how an attacker gained access to an IoT management server. Which of the following would be most helpful in this investigation?

   • AA list of all current user accounts and their roles.
   • BDetailed authentication logs showing successful and failed login attempts, including source IP addresses and timestamps.
   • CA backup of the system's configuration files.
   • DThe system's firewall configuration.
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A company's IoT device management platform supports only username/password authentication. The company is considering adding two-factor authentication (2FA) to reduce the risk of credential theft. However, some legacy devices cannot support 2FA prompts. Which approach would best balance security and usability?

   • ARequire 2FA for all users, and for legacy devices, use a one-time passcode generated by a hardware token that the user enters manually.
   • BImplement 2FA only for administrative accounts, not for regular users.
   • CReplace all legacy devices with newer models that support 2FA.
   • DExempt legacy devices from 2FA to ensure they continue to function.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A company's IoT device admin portal has no account lockout policy. An attacker is performing a brute-force attack on a user's account. Which of the following would be the most effective control to stop this attack?

   • AImplement an account lockout policy that locks the account after a small number of failed attempts.
   • BAdd a CAPTCHA to the login form.
   • CRequire users to change their passwords every 30 days.
   • DIncrease the password complexity requirements.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Which attack is most directly enabled by a user choosing a simple, easily guessable password?

   • AMan-in-the-middle attack
   • BDictionary attack
   • CSQL injection
   • DDenial of service
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   What is the primary risk of transmitting credentials over an unencrypted protocol like HTTP?

   • AThe server will reject the credentials.
   • BCredentials can be intercepted and read by an attacker on the network.
   • CThe credentials are automatically logged in plaintext.
   • DCredentials become corrupted and unusable.
   Reveal Solution Discussion Select an answer first