A company deploys IoT-enabled fitness trackers to employees as part of a wellness program. The trackers collect heart rate and step count. The company must inform employees about what data is collected and how it will be used. What is the most appropriate action?

Send a one-time email to all employees stating that the trackers are being deployed.

Include a clause in the employee handbook that mentions the wellness program.

Provide a clear privacy notice explaining the data collected, the purpose, and the employees' rights.

Post a sign in the office lobby mentioning that fitness data is being collected.

What is the main purpose of a data retention policy in an IoT system?

To notify users about data collection

To specify how long data should be kept before it is deleted or anonymized

To determine who can access the data

To encrypt data while it is stored

A healthcare IoT device transmits patient health data to a cloud server. Which control is most appropriate to protect the confidentiality of this sensitive data while it is being transmitted?

Access control lists on the cloud server

Regular backups of the data to a secondary site

Data masking of the patient's name in the database

Encryption using TLS/SSL for the network connection

What is the primary purpose of an end-user notification policy in an IoT system?

To inform users about data collection, usage, and their rights

To ensure only authorized users can access data

To encrypt user data before storing it

To limit the amount of data collected from users

CertNexusCertified IoT Security Practitioner (CIoTSP)

Domain 5Objective 2

Objective 5.2 Implement Countermeasures Used to Ensure Data Privacy. CERTIFIED-IOT-SECURITY-PRACTITIONER Practice Questions (Page 4)

Part of the 5.0 Addressing Privacy Concerns domain, which accounts for 12% of the CERTIFIED-IOT-SECURITY-PRACTITIONER exam.

33questions here

7free pages

9concepts

12%of the exam

Questions 16–20

16application · medium
A company deploys IoT-enabled fitness trackers to employees as part of a wellness program. The trackers collect heart rate and step count. The company must inform employees about what data is collected and how it will be used. What is the most appropriate action?
Select an answer first
17foundation · easy
What is the main purpose of a data retention policy in an IoT system?
Select an answer first
18foundation · easy
Which US privacy law grants California residents the right to know what personal information is collected about them and to request its deletion?
Select an answer first
19foundation · easy
A healthcare IoT device transmits patient health data to a cloud server. Which control is most appropriate to protect the confidentiality of this sensitive data while it is being transmitted?
Select an answer first
20foundation · easy
What is the primary purpose of an end-user notification policy in an IoT system?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CERTIFIED-IOT-SECURITY-PRACTITIONER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CertNexus. “CERTIFIED-IOT-SECURITY-PRACTITIONER” is a trademark of its owner, used for identification only.