Objective 2.2 Implement Countermeasures Used to Provide Secure Authentication, Authorization, and Accounting. CERTIFIED-IOT-SECURITY-PRACTITIONER Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the primary purpose of event logging for authentication and authorization activities in an IoT system?

   • ATo automatically block all failed login attempts
   • BTo reduce the amount of data stored on the device
   • CTo provide a record of user and device actions for audit and analysis
   • DTo encrypt all network traffic
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A logistics company has IoT trackers on its fleet. The security operations center (SOC) wants to be notified immediately when a tracker attempts to authenticate with invalid credentials more than five times in a minute, because this may indicate a brute-force attack. Which countermeasure should be implemented?

   • AConfigure the authentication system to send an automated alert to the SOC when the threshold is exceeded.
   • BEnable detailed logging of all authentication attempts and review logs weekly.
   • CDeploy a firewall to block all traffic from unknown IP addresses.
   • DImplement a password policy that requires trackers to use complex passwords.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A smart grid operator has deployed IoT sensors that report usage data. The security team wants to detect anomalies such as a sensor sending data at unusual times or from an unexpected location. Which countermeasure should be implemented?

   • AImplement continuous security monitoring that analyzes sensor behavior and flags deviations from baseline patterns.
   • BRequire all sensors to use strong passwords and rotate them monthly.
   • CEnable comprehensive event logging and archive logs for one year.
   • DImplement role-based access control to limit who can view sensor data.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A hospital's IoT medication dispensing system allows nurses to administer medications. The system is used on shared tablets. Management wants to ensure that if a nurse leaves a tablet unattended, a passerby cannot administer a high-risk medication without additional verification. Which countermeasure should be implemented?

   • ARequire the nurse to re-authenticate (e.g., fingerprint or PIN) immediately before administering high-risk medications.
   • BImplement role-based access control to limit which medications each nurse can administer.
   • CSet up automated alerts to the IT department when a medication is administered.
   • DEnable comprehensive logging of all medication administration events.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A utility company has IoT devices that control grid substations. The security team wants to be notified immediately if an unauthorized device attempts to connect to the network. Which countermeasure should be implemented?

   • ADeploy a firewall to block all traffic from unknown IP addresses.
   • BEnable comprehensive logging of all connection attempts and review logs weekly.
   • CConfigure the network access control (NAC) system to send automated alerts to IT/OT administrators when a device fails authentication.
   • DImplement a strong password policy for all IoT devices.
   Reveal Solution Discussion Select an answer first