Understand Common IoT Security and Privacy Countermeasures. ITP-110 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which technique is used to distribute incoming IoT traffic across multiple servers to ensure no single server is overwhelmed?

   • AHashing
   • BDigital signatures
   • CLoad balancing
   • DEncryption
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What distinguishes penetration testing from vulnerability assessment?

   • APenetration testing only scans for known vulnerabilities.
   • BPenetration testing does not require authorization.
   • CPenetration testing is always automated.
   • DPenetration testing actively exploits vulnerabilities to prove impact.
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A hospital relies on a fleet of IoT infusion pumps that must remain available for patient care. The pumps connect to a central medication-management server. The IT team is designing the server architecture and must ensure continuous availability even if one server fails, while also protecting against a DDoS attack that could overwhelm the service. The budget is limited, and the team cannot afford a full active-active cluster. Which architecture best meets these competing requirements?

   • ADeploy a single server with a cloud-based DDoS protection service and no failover.
   • BDeploy multiple active servers in a load-balanced cluster with no additional traffic controls.
   • CDeploy an active-passive failover pair behind a load balancer that also performs rate limiting and traffic filtering.
   • DDeploy a single high-end server with redundant power supplies and network connections.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is the goal of data anonymization in IoT?

   • ATo make the data completely unusable
   • BTo protect individual privacy while preserving the data's usefulness
   • CTo delete all data collected from IoT devices
   • DTo encrypt the data so only authorized users can read it
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A team is developing a new IoT gateway and wants to identify security flaws in the code before release. They have a limited budget and want to catch common issues like buffer overflows and SQL injection early in the development cycle, before the code is run. Which approach is the most appropriate for this stage?

   • AReview the code manually with a senior developer only, without any automated tools.
   • BPerform a penetration test against the deployed gateway in a staging environment.
   • CConduct a vulnerability scan of the gateway's network services after deployment.
   • DRun a static application security testing (SAST) tool on the source code during the build process.
   Reveal Solution Discussion Select an answer first