Objective 3.2 Implement Countermeasures Used to Provide Secure Network Services. CERTIFIED-IOT-SECURITY-PRACTITIONER Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A smart agriculture company uses wireless sensors to monitor soil conditions. The sensors send data to a central server over a wireless network. The security team is concerned about attackers intercepting the data and sending false readings. Which countermeasure should be implemented to protect the data and ensure its authenticity?

   • AImplement secure boot on the sensors
   • BEnable port security on the wireless access point
   • CUse TLS with mutual authentication between the sensors and the server
   • DApply rate limiting to the server's incoming traffic
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which DoS mitigation approach involves using a third-party service to absorb and filter malicious traffic before it reaches the target network?

   • ARate limiting
   • BLoad balancing
   • CDDoS protection service
   • DTraffic filtering
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which memory protection technique randomizes the memory addresses of executable code to make buffer overflow attacks less predictable?

   • AStack canaries
   • BASLR
   • CDEP
   • DSecure coding practices
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A software developer is writing an application for an IoT device that will be deployed in a hostile environment. The application has been found to have a buffer overflow vulnerability that could be exploited to execute arbitrary code. The developer wants to mitigate this vulnerability while also ensuring that the device is protected from unauthorized configuration changes. Which combination of countermeasures should be implemented?

   • AApply IPsec to all communication and disable unused ports
   • BUse secure coding practices and enable ASLR and DEP, and configure RBAC for device management
   • CUse signed firmware updates and enable secure boot
   • DImplement rate limiting on the device's network traffic
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which countermeasure is used to prevent tampering with data transmitted between a field device and a central controller?

   • AEncryption
   • BRate limiting
   • CSecure boot
   • DPort security
   Reveal Solution Discussion Select an answer first