You can see it againUnder pressure people bring back shapes and positions long after the wording has gone.
Picture superiority · Shepard 1967, Standing 1973
CERTNEXUSCertNexus Certified IoT Security Practitioner (CIoTSP)
The CertNexus Certified IoT Security Practitioner (CIoTSP) certification validates your ability to secure IoT network environments, analyze vulnerabilities, and determine reasonable controls against threats. It also confirms you can monitor IoT devices and respond to incidents effectively. Earning CIoTSP demonstrates a foundational skill set in secure IoT concepts, technologies, and tools, preparing you for a wide variety of IoT security roles.
Exam formatMultiple choice
DeliveryPearson VUE
Free questions395
Content last reviewed 30 July 2026 · Up to date
The certification
What CertNexus Certified IoT Security Practitioner (CIoTSP) proves, and what it asks of you
What this certification covers, who it is written for, and what the exam itself looks like on the day.
7domains
14objectives
108concepts
What it is
What this certification is
What it validates, who it is written for, and the experience it assumes.
About this certification
The CertNexus Certified IoT Security Practitioner (CIoTSP) certification validates a candidate's knowledge, skills, and abilities to secure network environments for IoT devices, analyze vulnerabilities and determine reasonable controls against threats, and effectively monitor IoT devices and respond to incidents.
The exam also certifies that successful candidates have the foundational skill set of secure IoT concepts, technologies, and tools that will enable them to become capable IoT security practitioners in a wide variety of IoT-related job functions. This certification is ideal for professionals seeking to demonstrate their expertise in protecting IoT ecosystems.
Who it’s for
This certification is designed for individuals in a wide variety of job functions who are responsible for securing IoT devices and networks. It is ideal for IT professionals, security practitioners, and network administrators who want to validate their skills in IoT security. Candidates should have a foundational understanding of IoT concepts and security principles, and be looking to advance their careers in the growing field of IoT security.
Recommended experience
While CertNexus does not mandate formal prerequisites, a foundational understanding of IoT concepts and security principles is recommended. Basic knowledge of IoT ecosystems and components; Understanding of network security fundamentals; Familiarity with vulnerability analysis and threat modeling; Experience with security monitoring and incident response
The syllabus
What you’ll learn
Every domain and objective CertNexus measures, with the weight they carry on the exam.
The official CertNexus exam outline · checked 30 July 2026 · See the source
1.0 Securing IoT Portals
- Objective 1.1 Identify common threats used to compromise unsecure web, cloud, or mobile interfaces.
- Objective 1.2 Implement countermeasures used to secure web, cloud, or mobile interfaces.
2.0 Implementing Authentication, Authorization, and Accounting
- Objective 2.1 Identify common threats used to exploit weak authentication/authorization schemes.
- Objective 2.2 Implement countermeasures used to provide secure authentication, authorization, and accounting.
3.0 Securing Network Services
- Objective 3.1 Identify common threats used to exploit unsecure network services.
- Objective 3.2 Implement countermeasures used to provide secure network services.
4.0 Securing Data
- Objective 4.1 Identify common threats used to exploit unsecure data.
- Objective 4.2 Implement countermeasures used to secure data.
5.0 Addressing Privacy Concerns
- Objective 5.1 Identify common threats used to compromise privacy.
- Objective 5.2 Implement countermeasures used to ensure data privacy.
6.0 Securing Software/Firmware
- Objective 6.1 Identify common threats used to exploit unsecure software/firmware.
- Objective 6.2 Implement countermeasures used to provide secure software/firmware.
7.0 Enhancing Physical Security
- Objective 7.1 Identify common threats used to exploit poor physical security.
- Objective 7.2 Implement countermeasures used to ensure physical security.
On the day
The exam itself
Everything CertNexus publishes about sitting it, and nothing we inferred.
Prerequisites
No mandatory prerequisites — this certification has no required predecessor exam or credential.
CertificationCertNexus Certified IoT Security Practitioner (CIoTSP)
Exam formatMultiple choice
DeliveryPearson VUE
LanguagesEnglish
Certification levelPractitioner
After you pass
Where this credential goes next
The path CertNexus lays out, how the credential is kept, and where to book.
Step-by-step path to CertNexus Certified IoT Security Practitioner (CIoTSP)
Credential earnedCertNexus Certified IoT Security Practitioner (CIoTSP) Practitioner level certification Lifecycle status
This certification is currently active and available. CertNexus maintains this certification to validate current skills and industry relevance.
Exam status: ActiveMaintained by CertNexus
Exam registration
Register for the exam through Pearson VUE, CertNexus’s authorized testing partner.
Schedule your examVisit the official CertNexus certification page for exam policies and requirements.
View the official pageYour coach
And when you are serious, your coach Pip takes over
Your coach in the app reads what you have answered with the book closed and tells you one thing to do tonight. It will not count an answer you gave with the page open, and it will tell you when you are not ready.
See how the coach worksBefore you book
Questions people ask
How does the CIoTSP exam relate to the Certified IoT Practitioner (CIoTP) certification?
The CIoTSP is a separate, more security-focused certification. While CIoTP covers foundational IoT concepts, CIoTSP focuses specifically on securing IoT environments. There is no formal prerequisite between them.
Do I need to earn a lower-level CertNexus certification before taking ITS-110?
No. CertNexus does not require any prior certification for the CIoTSP exam. The Certified IoT Practitioner (CIoTP) is a related credential but is not a prerequisite.
Can I take the CIoTSP exam online?
Yes, the exam is available online via Pearson VUE's OnVUE service, in addition to test centers. You must meet specific technology and environment requirements for online testing.
What are the retake policies for the CIoTSP exam?
CertNexus vouchers include one free retake. You can use the same voucher to schedule a retake if you do not pass on the first attempt. Standard waiting periods may apply.
Are there any hands-on or lab components in the CIoTSP exam?
The official description does not mention a hands-on lab component. The exam focuses on validating knowledge, skills, and abilities through theoretical and scenario-based questions.
What job roles does the CIoTSP credential map to?
The CIoTSP is designed for individuals in a wide variety of IoT-related job functions, including IoT security practitioners, network security professionals, and IT professionals responsible for securing IoT deployments.
How soon will I receive my exam results?
Pearson VUE typically provides preliminary results immediately for computer-based exams. Official score reports are available within a few days. CertNexus does not publish a specific timeline.
Can I get testing accommodations for the CIoTSP exam?
Yes, CertNexus provides special accommodations under the Americans with Disabilities Act (ADA). You must request accommodations through Pearson VUE's Candidate Resources and follow the procedures in the Candidate Handbook.
Information freshness · Content last reviewed on 2026-07-30 Up to date
Practice free questions 395 questions, free, no account needed.
The curriculum
The whole exam, mapped and written
Every domain, every objective, and every concept CertNexus measures — each one written out.
7domains
14objectives
108concepts
84free pages
The domains, and what sits inside them
Every objective below is a page you can open and practise now, without an account.
The official CertNexus exam outline · checked 30 July 2026 · See the source
11.0 Securing IoT Portals83 questions
22.0 Implementing Authentication, Authorization, and Accounting63 questions
33.0 Securing Network Services56 questions
44.0 Securing Data33 questions
55.0 Addressing Privacy Concerns54 questions
66.0 Securing Software/Firmware57 questions
Not a table of contents
Every line on this map already opens
In front of every objective the practice pages are already there, free and without an account. This is one objective, opened.
Objective 1.1 Identify common threats used to compromise unsecure web, cloud, or mobile interfaces.10 pagesOpen →
Free in front of it
49 questions on this objective, five to a page. Every range above is a real page, open now, with no account.
Reading the map is not the same as knowing the ground
The curriculum tells you what is on the exam. Proving you know it is a different job — and it is the one the closed-book run does.
Free questions
395 questions. No account, no card.
The whole bank is open. 5 questions to a page, every answer explained, and a discussion thread on each one.
395questions
84pages
14objectives
Freealways
Start anywhereObjective 1.1 Identify common threats used to compromise unsecure web, cloud, or mobile interfaces. 49 questions · 10 pages
Browse by domain
Every objective, and every page range, is a link — so you can pick up exactly where you left off.
11.0 Securing IoT Portals83 questions
22.0 Implementing Authentication, Authorization, and Accounting63 questions
33.0 Securing Network Services56 questions
44.0 Securing Data33 questions
55.0 Addressing Privacy Concerns54 questions
66.0 Securing Software/Firmware57 questions
77.0 Enhancing Physical Security49 questions
What a practice page gives you
1Five to a page
Short enough to finish, long enough to matter.
2Every answer explained
Not only which one is right — why the others are wrong.
3A discussion on each
Ask, answer, and vote. Every question has its own thread.
A question, and the idea behind it
Every question comes from a concept
These are not trivia. Each one is written against a concept in the book, so when you get one wrong there is somewhere to go and find out why.
The visual book
See it once. Carry it into the exam.
The pages shown here come from our AI-900 book — an example of how each concept is written in plain language and, where the idea needs one, drawn as a full page you can take in at a glance.
108concepts
395free questions
Why a picture, and not another paragraph
Three reasons, and each one is a real finding rather than a slogan.
You can see it againThe whole idea at onceWhere it starts, what happens in the middle, what comes out, and the mistake to avoid.
Multimedia principle · MayerThe look-alikes sit togetherThe pairs the exam tests are drawn side by side, so the difference is seen, not told.
Dual coding · PaivioWhat one page is made of
You are never asked to read a poster here — only to see how one is built. After that, every other page is legible at a glance.
1A numbered strip on top
The idea as a sequence, followed with a finger before a word is read.
2Panels for the parts
What it is, how the machine learns it, when it is the right tool.
3The trap, framed
The distinction the exam tests, given its own box instead of buried in prose.
4One line at the bottom
The sentence to carry into the exam room.
Open book, on purpose
Answer it with the picture beside you
This is the part that teaches. The illustration and the written explanation stay where they are while you work, so a scenario stops being a memory test and becomes something you can simply look at.
It teaches · it does not count
A smartphone uses AI to unlock when the owner looks at the camera. Which AI capability is being used?
AImage classification
BFacial recognition
COptical character recognition
DObject detection
Look at the five steps. Detect finds a face, align straightens it, encode turns it into numbers, search compares it with a stored face, and decide answers one question: is this the same person? Classification would only say “a face”. Detection would only draw a box. Neither decides whose.
Then the page shuts, and it starts counting
The same questions come back with the book closed — that run is the one that counts. After it, your coach picks one thing for tonight, sized to the time you have, and brings pages back before you lose them.
Testing effect · Roediger & Karpicke 2006 · spacing effect · Cepeda et al. 2006
Official resources
Straight from CertNexus
Where the exam is defined, scheduled and scored.
3official links
108concepts mapped
The source
CertNexus’s own pages
We link to them rather than repeat them, so nothing here goes stale behind them.
Checked against the source
Every objective on the official CertNexus outline already has questions here
We build from the official skills outline, not from a summary of it — 14 objectives, 108 concepts written under them, and free questions against every one. When CertNexus changes the outline, this page changes with it.
14objectives on the outline→108concepts written→395free questions
An official page tells you what will be asked. It cannot tell you what you will get right.
That is the only question worth answering the night before, and no link answers it. You answer it by taking the questions with the book closed, and seeing what comes back.