Objective 2.1 Identify Common Threats Used to Exploit Weak Authentication/authorization Schemes. CERTIFIED-IOT-SECURITY-PRACTITIONER Practice Questions (Page 8)

Questions 36–38

1. 36foundation · easy

   Why is storing credentials in plaintext on a device considered a security risk?

   • AIt increases the device's power consumption.
   • BIt allows anyone with physical access to read the credentials.
   • CIt prevents the device from connecting to the network.
   • DIt makes the device run slower.
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   What is the primary purpose of role-based access control (RBAC)?

   • ATo provide a backup of user credentials
   • BTo monitor network traffic for intrusions
   • CTo encrypt all data stored on the device
   • DTo assign permissions based on the user's job function
   Reveal Solution Discussion Select an answer first
3. 38foundation · easy

   Why is it important to protect security logs from tampering?

   • ATo reduce the storage space required
   • BTo speed up the logging process
   • CTo make the logs easier to read
   • DTo ensure the logs remain reliable evidence in an investigation
   Reveal Solution Discussion Select an answer first