A hospital has a mix of legacy medical devices that do not support 802.1X and newer devices that do. The security team wants to implement port control to prevent unauthorized devices from connecting to the network while ensuring that the legacy devices can still function. Which approach should be taken?

Use 802.1X for devices that support it and use MAC address filtering for legacy devices

Implement IPsec for all traffic on the network

Use port security with MAC address limiting on all ports

Disable all unused ports and require 802.1X on all active ports

A security architect is designing a firmware update process for IoT devices that have limited processing power and memory. The devices are deployed in the field and cannot be easily replaced. The architect needs to ensure that firmware updates are authentic and that the devices are protected from memory corruption attacks. Which combination of countermeasures should be implemented?

Use signed firmware updates and enable ASLR and DEP on the devices

Apply rate limiting to the firmware update server

Use a VPN for firmware updates and disable unused ports

Use encrypted firmware updates and implement secure boot

A security analyst is reviewing the code of an IoT application that runs on a device with limited memory. The application processes data from an external source and has been found to have a buffer overflow vulnerability. Which countermeasure should be implemented to mitigate this vulnerability?

Implement rate limiting on the device's network traffic

Apply secure coding practices such as bounds checking and input validation

Use a VPN to encrypt all communication with the device

Enable port security on the device's network interface

A network administrator is responsible for securing a set of routers that are used in a critical infrastructure environment. The routers are managed remotely, and the administrator wants to ensure that management traffic is protected and that only authorized administrators can make configuration changes. Which combination of countermeasures should be implemented?

Apply rate limiting to management traffic

Implement IPsec for all router-to-router communication

Use SNMPv3 for monitoring and disable unused ports

Use SSH for management access and configure role-based access control (RBAC) for administrators

CertNexusCertified IoT Security Practitioner (CIoTSP)

Domain 3Objective 2

Objective 3.2 Implement Countermeasures Used to Provide Secure Network Services. CERTIFIED-IOT-SECURITY-PRACTITIONER Practice Questions (Page 5)

Part of the 3.0 Securing Network Services domain, which accounts for 14% of the CERTIFIED-IOT-SECURITY-PRACTITIONER exam.

27questions here

6free pages

6concepts

14%of the exam

Questions 21–25

21foundation · easy
Which port control measure is designed to prevent unauthorized devices from connecting by limiting the number of MAC addresses allowed on a switch port?
Select an answer first
22expert · hard
A hospital has a mix of legacy medical devices that do not support 802.1X and newer devices that do. The security team wants to implement port control to prevent unauthorized devices from connecting to the network while ensuring that the legacy devices can still function. Which approach should be taken?
Select an answer first
23expert · hard
A security architect is designing a firmware update process for IoT devices that have limited processing power and memory. The devices are deployed in the field and cannot be easily replaced. The architect needs to ensure that firmware updates are authentic and that the devices are protected from memory corruption attacks. Which combination of countermeasures should be implemented?
Select an answer first
24application · medium
A security analyst is reviewing the code of an IoT application that runs on a device with limited memory. The application processes data from an external source and has been found to have a buffer overflow vulnerability. Which countermeasure should be implemented to mitigate this vulnerability?
Select an answer first
25expert · hard
A network administrator is responsible for securing a set of routers that are used in a critical infrastructure environment. The routers are managed remotely, and the administrator wants to ensure that management traffic is protected and that only authorized administrators can make configuration changes. Which combination of countermeasures should be implemented?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CERTIFIED-IOT-SECURITY-PRACTITIONER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CertNexus. “CERTIFIED-IOT-SECURITY-PRACTITIONER” is a trademark of its owner, used for identification only.

Objective 3.2 Implement Countermeasures Used to Provide Secure Network Services. CERTIFIED-IOT-SECURITY-PRACTITIONER Practice Questions (Page 5)

Questions 21–25

Which port control measure is designed to prevent unauthorized devices from connecting by limiting the number of MAC addresses allowed on a switch port?

A security analyst is reviewing the code of an IoT application that runs on a device with limited memory. The application processes data from an external source and has been found to have a buffer overflow vulnerability. Which countermeasure should be implemented to mitigate this vulnerability?

Keep studying — 3.0 Securing Network Services