Objective 7.2 Implement Countermeasures Used to Ensure Physical Security. CERTIFIED-IOT-SECURITY-PRACTITIONER Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the primary goal of limiting administrative capabilities on an IoT device?

   • ATo increase the device's processing speed
   • BTo reduce the attack surface by granting only necessary privileges
   • CTo make the device easier to configure for all users
   • DTo allow all users to change security settings
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A hospital's IoT patient monitoring system is managed by a team of nurses and IT staff. Nurses need to view patient data, while IT staff need to configure the devices. Currently, all users have the same administrative credentials. What is the best way to reduce the risk of accidental misconfiguration by nurses?

   • AUse the same admin account but require a second person to approve any configuration change
   • BProvide nurses with a read-only dashboard and keep the admin credentials for IT staff only
   • CCreate separate roles for 'viewer' and 'administrator' and assign users to the appropriate role
   • DTrain nurses on how to use the administrative interface correctly
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A logistics company manages a fleet of IoT-enabled vehicles. Each vehicle has a telematics unit that can be accessed via SSH for diagnostics. Currently, all three fleet technicians share a single 'admin' account with full privileges. Management wants to reduce the risk of a disgruntled employee disabling vehicle tracking. What should you implement?

   • ACreate individual user accounts for each technician and assign only the permissions needed for their specific job role
   • BKeep the shared admin account but change the password every 90 days
   • CRemove SSH access for all technicians and require them to physically connect to each vehicle for diagnostics
   • DUse a single 'diagnostics' account with read-only permissions for all technicians
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A defense contractor uses IoT sensors in a secure facility. The sensors store classified data on internal flash memory. The contractor is required to ensure that data cannot be recovered if a sensor is physically stolen. The sensors are deployed in areas where they may be offline for extended periods. Which approach best meets the requirement?

   • AApply a tamper-evident seal to the sensor housing to show if it was opened
   • BEncrypt the flash memory with a key stored in the sensor's secure element, and configure the sensor to wipe the key upon detecting tampering
   • CUse a remote wipe command that erases the flash memory when the sensor is reported stolen
   • DStore the data on a removable SD card that can be physically removed and secured separately
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which physical port on an IoT device is commonly targeted for unauthorized debugging or data extraction?

   • AEthernet port
   • BAntenna connector
   • CSerial port (e.g., UART)
   • DPower input port
   Reveal Solution Discussion Select an answer first