Objective 4.2 Implement Countermeasures Used to Secure Data. CERTIFIED-IOT-SECURITY-PRACTITIONER Practice Questions (Page 4)

Questions 16–18

1. 16foundation · easy

   Why is it important to securely store cryptographic keys in an IoT device?

   • ATo speed up the encryption process
   • BTo prevent unauthorized access to encrypted data if the device is compromised
   • CTo enable the device to connect to the internet
   • DTo reduce the power consumption of the device
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What does full-disk encryption (FDE) protect against?

   • ANetwork eavesdropping during data transmission
   • BUnauthorized access to data when the device is powered off or stolen
   • CUnauthorized changes to the operating system files
   • DMalware infections while the device is running
   Reveal Solution Discussion Select an answer first
3. 18application · medium

   A medical device manufacturer stores patient data on each device's local flash storage. The data must be protected if a device is lost or stolen. The devices run a lightweight embedded OS and have limited CPU. Which countermeasure provides the strongest protection for the stored data?

   • AFull-disk encryption using AES-256 with the key stored in the device's secure element.
   • BFile-level encryption applied only to the database file containing patient records.
   • CA password-protected zip archive of the patient data files.
   • DObfuscating the data by renaming files and hiding them in system directories.
   Reveal Solution Discussion Select an answer first