Objective 6.2 Implement Countermeasures Used to Provide Secure Software/firmware. CERTIFIED-IOT-SECURITY-PRACTITIONER Practice Questions (Page 6)

Questions 26–27

1. 26expert · hard

   A security team is evaluating a device that uses measured boot. The device's TPM reports PCR values that match the known-good baseline. However, the team is concerned that the device's operating system could have been compromised after boot. What is the most important limitation of measured boot in this scenario?

   • AMeasured boot does not provide any protection against bootkits.
   • BMeasured boot only verifies the boot process, not the runtime state of the OS after boot.
   • CMeasured boot cannot be used for remote attestation.
   • DMeasured boot requires a TPM, which is not available on all devices.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which of the following is typically stored inside a secure enclave?

   • APrivate keys used for signing firmware updates
   • BThe device's user interface configuration
   • CThe device's model number
   • DThe device's IP address
   Reveal Solution Discussion Select an answer first