Objective 4.2 Implement Countermeasures Used to Secure Data. CERTIFIED-IOT-SECURITY-PRACTITIONER Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the primary purpose of using TLS (Transport Layer Security) in an IoT communication channel?

   • ATo compress data to reduce bandwidth usage
   • BTo authenticate users with passwords
   • CTo route data packets across the network
   • DTo encrypt data transmitted between a client and a server
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A company deploys IoT devices that use MQTT to publish sensor data to a broker. The data is sensitive and must be protected in transit. The devices are resource-constrained and cannot handle the overhead of TLS. The company is considering using a VPN concentrator at the edge. Which approach provides the best security while minimizing overhead on the devices?

   • AUse a custom encryption protocol on top of MQTT.
   • BUse IPsec in transport mode on each device.
   • CUse TLS with a pre-shared key on each device.
   • DUse a gateway that terminates the VPN and forwards the MQTT traffic to the broker over a secure channel.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the role of a cryptographic key in an encryption process?

   • AIt is a checksum that verifies data integrity after transmission
   • BIt is a fixed value that is the same for all users of a system
   • CIt is a secret value that controls the transformation of plaintext into ciphertext and back
   • DIt is a public identifier used to label encrypted data
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is a trusted execution environment (TEE) used for in the context of data in use?

   • ATo authenticate users with biometric data
   • BTo establish a VPN connection over the internet
   • CTo provide a secure area within a processor that protects data during processing
   • DTo encrypt data before it is stored on a disk
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company uses a fleet of IoT devices that communicate with a central server using TLS. The devices are deployed in the field for several years. The security team wants to ensure that the TLS keys are rotated regularly without requiring manual intervention on each device. Which approach should be implemented?

   • AUse a certificate management system that automatically renews and deploys certificates to the devices.
   • BUse a long-lived certificate that expires after 10 years.
   • CHave an administrator manually update the keys during scheduled maintenance.
   • DUse a static pre-shared key that is embedded in the device firmware.
   Reveal Solution Discussion Select an answer first