Objective 2.2 Implement Countermeasures Used to Provide Secure Authentication, Authorization, and Accounting. CERTIFIED-IOT-SECURITY-PRACTITIONER Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is the main benefit of configuring automated notifications to IT and OT administrators for critical security events?

   • AIt enables timely response to potential security incidents
   • BIt eliminates the need for any manual monitoring
   • CIt prevents all unauthorized access attempts
   • DIt automatically patches all vulnerabilities
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which type of event should be logged to support accounting (AAA) in an IoT system?

   • AFirmware version numbers
   • BAmbient temperature readings
   • CSuccessful and failed login attempts
   • DNetwork cable color
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A manufacturing company has a fleet of IoT sensors that authenticate to a central gateway using passwords. A recent audit revealed that many sensors use default passwords and that password hashes are stored in plaintext in the gateway's configuration file. Which combination of actions should the company take to address these findings?

   • ARequire all sensors to use the same strong password to simplify management, and store that password in an encrypted file.
   • BDisable password authentication and rely on network segmentation to protect the gateway.
   • CEnforce a policy requiring unique complex passwords for each sensor, and store password hashes using a strong hashing algorithm with per-device salts.
   • DImplement event logging to record all authentication attempts and review logs monthly.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is the goal of continuous security monitoring in an IoT environment?

   • ATo reduce the need for firmware updates
   • BTo detect anomalies and suspicious activities in real time
   • CTo guarantee that no security incident will ever occur
   • DTo replace the need for authentication mechanisms
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A factory uses IoT controllers that are accessed by multiple engineers. The security team needs to know who accessed which controller, when, and what commands were executed, to support incident investigations. Which countermeasure should be implemented?

   • AConfigure comprehensive event logging that records authentication, authorization, and command execution events with timestamps and user identifiers.
   • BDeploy a network intrusion detection system (IDS) to monitor traffic.
   • CImplement multi-factor authentication for all engineers.
   • DSet up automated alerts for failed login attempts.
   Reveal Solution Discussion Select an answer first