Objective 3.2 Implement Countermeasures Used to Provide Secure Network Services. CERTIFIED-IOT-SECURITY-PRACTITIONER Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which memory protection technique prevents code execution from data regions such as the stack and heap?

   • ADEP
   • BASLR
   • CSecure coding practices
   • DStack canaries
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A developer is writing firmware for an IoT sensor that processes untrusted data from external inputs. The security team is concerned about buffer overflow attacks that could lead to memory corruption and arbitrary code execution. Which combination of countermeasures should be implemented?

   • AUse a firewall to filter incoming traffic to the sensor
   • BEnable ASLR and DEP, and use secure coding practices like bounds checking
   • CEncrypt all data stored on the sensor's flash memory
   • DImplement secure boot and signed firmware updates
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A water treatment facility uses field devices such as sensors and actuators to control chemical dosing. The security team is concerned about attackers tampering with the devices' firmware and gaining unauthorized control. Which countermeasure should be implemented to ensure the devices only run trusted firmware?

   • AConfigure rate limiting on the network gateway
   • BEnable ASLR and DEP on the devices
   • CApply IPsec to all communication with the devices
   • DImplement secure boot and signed firmware updates
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A transportation company uses IoT devices in vehicles to transmit telemetry data to a central server. The data must be protected from tampering during transmission, and the network must be resilient to DoS attacks. Which countermeasure should be implemented?

   • AUse IPsec to encrypt and authenticate all traffic between the devices and the server
   • BApply port security on the network switches
   • CDeploy a DDoS protection service
   • DEnable secure boot on the devices
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   An organization manages a fleet of network routers that are deployed in remote locations. The security team wants to ensure that only authorized administrators can access the routers and that the routers are protected from known vulnerabilities. Which combination of measures should be implemented?

   • AEnable SNMPv3 for monitoring and disable unused ports
   • BApply regular security patches and configure access control lists (ACLs) to restrict management access
   • CUse a DDoS protection service for the routers
   • DImplement IPsec for all router-to-router communication
   Reveal Solution Discussion Select an answer first