Objective 7.2 Implement Countermeasures Used to Ensure Physical Security. CERTIFIED-IOT-SECURITY-PRACTITIONER Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the primary purpose of encrypting data at rest on an IoT device's storage?

   • ATo speed up data read and write operations
   • BTo reduce the storage capacity required for data
   • CTo prevent unauthorized network access to the device
   • DTo ensure data remains confidential if the physical storage is compromised
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A hospital deploys IoT infusion pumps that store patient medication history locally on removable SD cards. A pump was stolen from a supply closet before the SD card could be retrieved. The hospital's primary concern is that the patient data on the card remains unreadable. Which countermeasure should have been implemented?

   • AA tamper-evident seal on the SD card slot that would show if the card was removed
   • BPhysical locks on the supply closet door with an access log
   • CFull-disk encryption on the SD card with the key stored in the pump's Trusted Platform Module
   • DA remote wipe capability that erases the SD card when the pump reports a theft
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which technology is commonly used to encrypt data at rest on a device's storage medium?

   • AAES (Advanced Encryption Standard)
   • BTLS (Transport Layer Security)
   • CSSH (Secure Shell)
   • DHTTPS (Hypertext Transfer Protocol Secure)
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the purpose of environmental design in limiting physical access to IoT devices?

   • ATo improve the aesthetic appearance of the facility
   • BTo place devices in locations that deter casual or unauthorized interaction
   • CTo make devices easily accessible for maintenance
   • DTo reduce the cost of device installation
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A government agency uses IoT sensors in a remote field location. The sensors store sensitive data on internal storage. The agency is concerned about both theft and physical damage from environmental factors. They want to ensure data confidentiality and device availability. Which approach best addresses both concerns?

   • AUse a ruggedized, tamper-resistant enclosure with encrypted storage and a tamper-responsive key wipe
   • BUse a tamper-evident seal and a backup battery for the sensor
   • CUse a standard enclosure and rely on the remote location's obscurity for security
   • DStore the data on a cloud service and remove local storage entirely
   Reveal Solution Discussion Select an answer first