Which activity is an example of continuous security monitoring for IoT devices?

Reviewing audit logs once a year

Updating device firmware manually every month

Performing a one-time vulnerability scan during deployment

Analyzing network traffic patterns to identify unusual communication

Which action would most likely require re-authentication in an IoT management system?

Changing a device's administrative password

A utility company has IoT devices that control power distribution. The security team wants to detect a potential insider threat where an employee with legitimate access performs unauthorized actions. They also need to meet compliance requirements that mandate retention of audit logs for at least one year. Which countermeasure should be implemented?

Implement continuous security monitoring that analyzes user behavior and flags anomalies.

Implement comprehensive event logging that captures all authentication, authorization, and accounting events, and store logs in a tamper-evident, centralized repository with a one-year retention policy.

Set up automated alerts to administrators when a user performs an action outside of business hours.

Implement RBAC to limit what each user can do.

Which security event would be most appropriate to trigger an automated notification to administrators?

A device reporting normal temperature readings

A routine firmware update completing successfully

Multiple failed authentication attempts from a single source

A successful login by a known administrator

Which practice is most effective for protecting IoT device credentials stored on the device itself?

Disabling password authentication entirely

Hardcoding the same password across all devices

Storing passwords in plaintext for simplicity

Using a strong hashing algorithm with a unique salt per device

CertNexusCertified IoT Security Practitioner (CIoTSP)

Domain 2Objective 2

Objective 2.2 Implement Countermeasures Used to Provide Secure Authentication, Authorization, and Accounting. CERTIFIED-IOT-SECURITY-PRACTITIONER Practice Questions (Page 4)

Part of the 2.0 Implementing Authentication, Authorization, and Accounting domain, which accounts for 14% of the CERTIFIED-IOT-SECURITY-PRACTITIONER exam.

25questions here

5free pages

6concepts

14%of the exam

Questions 16–20

16foundation · easy
Which activity is an example of continuous security monitoring for IoT devices?
Select an answer first
17foundation · easy
Which action would most likely require re-authentication in an IoT management system?
Select an answer first
18expert · hard
A utility company has IoT devices that control power distribution. The security team wants to detect a potential insider threat where an employee with legitimate access performs unauthorized actions. They also need to meet compliance requirements that mandate retention of audit logs for at least one year. Which countermeasure should be implemented?
Select an answer first
19foundation · easy
Which security event would be most appropriate to trigger an automated notification to administrators?
Select an answer first
20foundation · easy
Which practice is most effective for protecting IoT device credentials stored on the device itself?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CERTIFIED-IOT-SECURITY-PRACTITIONER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CertNexus. “CERTIFIED-IOT-SECURITY-PRACTITIONER” is a trademark of its owner, used for identification only.