What is the primary function of a keylogger in the context of IoT security?

To replicate itself across the network

To record keystrokes and capture sensitive input such as passwords

To block network traffic to the device

To encrypt data on the device and demand ransom

What is a man-in-the-middle (MITM) attack?

An attack where the attacker secretly intercepts and possibly alters communication between two parties

An attack that floods a network with traffic to cause denial of service

An attack that uses malicious software to record keystrokes

An attack that tricks users into revealing passwords through fake emails

Certified Internet of Things Practitioner (CIoTP)

Domain 3Objective 1

Understand Common IoT Security and Privacy Threats. ITP-110 Practice Questions (Page 3)

Part of the Security, Privacy, and Safety domain, which accounts for 28% of the ITP-110 exam.

62questions here

13free pages

29concepts

28%of the exam

Questions 11–15

11application · medium
A smart vending machine has a web-based management interface that allows remote commands. An attacker exploits a vulnerability to insert a command that is executed by the server, allowing them to retrieve the configuration file. Which attack is this?
Select an answer first
12foundation · easy
What is the primary function of a keylogger in the context of IoT security?
Select an answer first
13foundation · easy
What is a man-in-the-middle (MITM) attack?
Select an answer first
14application · medium
A security analyst notices that a smart thermostat's web interface is being bombarded with login attempts using common default passwords like 'admin' and '1234'. The attempts come from many different IP addresses. Which type of password attack is this?
Select an answer first
15expert · medium
A security analyst suspects that an attacker is capturing credentials as they are transmitted from a smart meter to the utility company's server. The analyst reviews network traffic and finds that the credentials are being sent in plaintext. Which attack is the attacker likely using?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ITP-110

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CertNexus. “ITP-110” is a trademark of its owner, used for identification only.

Understand Common IoT Security and Privacy Threats. ITP-110 Practice Questions (Page 3)

Questions 11–15

A smart vending machine has a web-based management interface that allows remote commands. An attacker exploits a vulnerability to insert a command that is executed by the server, allowing them to retrieve the configuration file. Which attack is this?

What is the primary function of a keylogger in the context of IoT security?

What is a man-in-the-middle (MITM) attack?

A security analyst notices that a smart thermostat's web interface is being bombarded with login attempts using common default passwords like 'admin' and '1234'. The attempts come from many different IP addresses. Which type of password attack is this?

A security analyst suspects that an attacker is capturing credentials as they are transmitted from a smart meter to the utility company's server. The analyst reviews network traffic and finds that the credentials are being sent in plaintext. Which attack is the attacker likely using?

Keep studying — Security, Privacy, and Safety