Objective 7.2 Implement Countermeasures Used to Ensure Physical Security. CERTIFIED-IOT-SECURITY-PRACTITIONER Practice Questions (Page 6)

Questions 26–28

1. 26foundation · easy

   Which feature is an example of tamper resistance in an IoT device?

   • AA bright LED that indicates device status
   • BA standard screw that can be removed with a common screwdriver
   • CA switch that erases cryptographic keys when the enclosure is opened
   • DA plastic casing that can be snapped open
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which measure is most effective for protecting a removable storage medium that contains sensitive IoT configuration data from being read if the medium is lost or stolen?

   • AUsing a standard USB flash drive without write-protection
   • BLabeling the medium as 'confidential'
   • CEncrypting the data stored on the medium
   • DStoring the medium in a locked cabinet
   Reveal Solution Discussion Select an answer first
3. 28application · medium

   A manufacturing plant's IoT edge gateway runs a Linux-based OS and is managed remotely by a team of five engineers. A recent incident showed that an engineer's stolen laptop was used to SSH into the gateway using a shared root password. Management wants to prevent this specific attack while keeping remote administration possible. What should you configure?

   • AReplace the shared root password with a longer, complex shared password
   • BAdd a firewall rule that only allows SSH from the plant's internal IP range
   • CConfigure SSH key-based authentication, disable password authentication, and revoke the shared root account in favor of individual user accounts
   • DDisable SSH entirely and require on-site console access for all configuration changes
   Reveal Solution Discussion Select an answer first