Objective 3.2 Implement Countermeasures Used to Provide Secure Network Services. CERTIFIED-IOT-SECURITY-PRACTITIONER Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which protocol is commonly used to create a secure tunnel for IP traffic, often used in VPNs?

   • AHTTP
   • BSNMP
   • CTLS
   • DIPsec
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which port control measure uses a RADIUS server to authenticate devices before granting network access?

   • APort security
   • BDisabling unused ports
   • CMAC address filtering
   • D802.1X
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A smart city deployment uses a public network to connect traffic light controllers to a central management system. The system has recently experienced SYN flood attacks that overwhelm the controllers. Which countermeasure should be implemented to mitigate this type of DoS attack?

   • ADisable unused ports on the network switches
   • BDeploy a DDoS protection service that filters malicious traffic before it reaches the controllers
   • CImplement secure boot on the traffic light controllers
   • DEnable IPsec between the controllers and the management system
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A logistics company uses IoT trackers that send location data over a public cellular network to a central server. The data must be protected from eavesdropping and tampering during transmission. Which countermeasure should be implemented?

   • AUse TLS for all communication between the trackers and the server
   • BEnable port security on the cellular gateway
   • CImplement secure boot on the trackers
   • DApply rate limiting to the server's incoming traffic
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A hospital has a network of medical IoT devices that must be isolated from the general IT network. The security team wants to ensure that only authorized medical devices can connect to the IoT network segment. Which countermeasure should be implemented?

   • AUse 802.1X authentication on the network switches to validate device credentials before granting access
   • BApply IPsec to all traffic on the IoT network segment
   • CImplement secure boot on the medical devices
   • DEnable ASLR and DEP on the medical devices
   Reveal Solution Discussion Select an answer first