Objective 4.2 Implement Countermeasures Used to Secure Data. CERTIFIED-IOT-SECURITY-PRACTITIONER Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the purpose of key rotation in an IoT system?

   • ATo periodically replace keys to limit the impact of a key compromise
   • BTo reduce the size of the encrypted data
   • CTo increase the encryption speed of the device
   • DTo make the encryption algorithm stronger
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which protocol is commonly used to secure data in motion by establishing an encrypted tunnel between two network endpoints?

   • AHTTP
   • BIPsec
   • CFTP
   • DSNMP
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A factory uses industrial IoT sensors that communicate with a local gateway over a wireless protocol that does not natively support encryption. The data is then sent to a cloud server over the internet. The security team needs to protect the data on both segments. Which combination of countermeasures should be implemented?

   • AUse a hardware security module (HSM) on each sensor to encrypt all outgoing data.
   • BEncrypt the sensor data with AES-256 before transmission and rely on the cloud provider's encryption.
   • CUse a VPN (IPsec) between the sensors and the gateway, and TLS between the gateway and the cloud.
   • DUse TLS between the sensors and the gateway, and IPsec between the gateway and the cloud.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   In the context of cryptography, what is the primary purpose of a cryptographic algorithm?

   • ATo generate random numbers for key creation
   • BTo authenticate users by verifying passwords
   • CTo transform data using a key to protect its confidentiality and integrity
   • DTo compress data to reduce storage and transmission size
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A smart grid company uses TLS to secure communication between smart meters and a central server. A security audit reveals that the same TLS certificate is used across all meters, and the private key has been exposed in a data breach. What should the company do to mitigate the risk?

   • ARotate the shared certificate to a new one and continue using it across all meters.
   • BDisable TLS and use a custom encryption protocol.
   • CRevoke the compromised certificate and issue unique certificates to each meter.
   • DIncrease the key size of the shared certificate to 4096 bits.
   Reveal Solution Discussion Select an answer first