Objective 3.2 Implement Countermeasures Used to Provide Secure Network Services. CERTIFIED-IOT-SECURITY-PRACTITIONER Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which practice is essential for maintaining the security of network nodes such as routers and switches?

   • AAllowing unrestricted remote access
   • BRegular patch management
   • CDisabling all services
   • DUsing default passwords
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which protocol is used to secure web traffic between a browser and a web server?

   • ASNMP
   • BTLS
   • CIPsec
   • DSSH
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A manufacturing plant has a network of OT devices connected to a switch. The security team wants to prevent unauthorized devices from connecting to the network by ensuring that only known devices can access the switch ports. Which countermeasure should be implemented?

   • AConfigure the switch to use a default VLAN for all ports
   • BApply IPsec to all traffic between the switch and the OT devices
   • CEnable SNMPv3 on the switch for secure management
   • DDisable unused ports and enable port security with MAC address limiting
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which security mechanism ensures that a field device only runs firmware that has been digitally signed by the manufacturer?

   • APatch management
   • BAuthentication
   • CEncryption
   • DSecure boot
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A network administrator is responsible for securing a set of industrial switches that are deployed in a factory. The administrator wants to ensure that only authorized personnel can manage the switches and that the switches are protected from unauthorized configuration changes. Which countermeasure should be implemented?

   • AApply IPsec to all switch-to-switch communication
   • BEnable port security on the switches
   • CConfigure strong authentication and authorization for management access, and disable unused services
   • DImplement rate limiting on the switches
   Reveal Solution Discussion Select an answer first