Understand Common IoT Security and Privacy Countermeasures. ITP-110 Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A supply-chain consortium tracks the movement of pharmaceutical containers across multiple independent logistics companies. Each company operates its own database, and disputes arise when one company claims it never received a shipment that another company recorded. The consortium needs a shared, tamper-evident record that no single company can unilaterally alter, and each event must be attributable to the company that logged it. Which technology best meets these requirements?

   • AA centralized database hosted by the largest logistics company, with all events logged in a single audit table.
   • BA permissioned blockchain shared among the consortium members, with each event signed by the logging company's private key.
   • CA public blockchain where any party can write shipment events without permission.
   • DA shared spreadsheet with version history and edit permissions for each company.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A utility deploys smart meters on the exterior of residential buildings. The meters store encryption keys and consumption data. A security assessment notes that an attacker with physical access could open the meter enclosure and probe the memory chip to extract the keys. Which physical security control is the most appropriate to mitigate this specific risk?

   • AEncrypt the data stored on the memory chip with a key stored in the same chip.
   • BUse a tamper-evident seal and a tamper-responsive mechanism that erases the keys when the enclosure is opened.
   • CUse a stronger encryption algorithm for the stored data.
   • DPlace the meters in a locked cabinet that only utility staff can access.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A smart factory has deployed a new line of robotic controllers. The security team has already run vulnerability scans and patched known issues. Management now wants to know whether an attacker could actually exploit the remaining weaknesses to gain control of a controller. Which activity directly answers this question?

   • ARun another vulnerability scan with a different tool to confirm the findings.
   • BReview the patch management logs to ensure all known patches were applied.
   • CConduct a penetration test that attempts to exploit the identified weaknesses in a controlled environment.
   • DImplement additional network segmentation to isolate the controllers from the corporate network.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Why is firmware security critical for IoT devices?

   • AFirmware controls the device's core functions and can be a target for attacks.
   • BFirmware is always unencrypted.
   • CFirmware is immune to malware.
   • DFirmware is the only component that stores user data.
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Which secure coding practice helps prevent buffer overflow attacks in IoT software?

   • ADisabling error messages
   • BIncreasing the buffer size
   • CInput validation
   • DUsing hardcoded passwords
   Reveal Solution Discussion Select an answer first