Understand Common IoT Security and Privacy Threats. ITP-110 Practice Questions (Page 9)

Questions 41–45

1. 41foundation · easy

   In the context of IoT security, what does the threat of impersonation specifically involve?

   • AAn attacker gaining physical access to a device and extracting its cryptographic keys.
   • BAn attacker causing a device to malfunction by sending it malformed data packets.
   • CAn attacker successfully posing as a legitimate device, user, or service to gain unauthorized access or deceive other entities.
   • DAn attacker intercepting and altering data transmitted between two legitimate devices.
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   A smart home hub communicates with a door lock over Zigbee. An attacker sets up a rogue Zigbee device that intercepts and forwards messages between the hub and the lock, allowing the attacker to capture the unlock command and replay it later. Which attack is being performed?

   • AMan-in-the-middle (MITM) attack
   • BDenial-of-service (DoS) attack
   • CBuffer overflow attack
   • DPharming attack
   Reveal Solution Discussion Select an answer first
4. 43foundation · easy

   How does ransomware affect the availability of an IoT device?

   • AIt increases the device's processing speed
   • BIt blocks all network traffic to the device
   • CIt permanently destroys the device's hardware
   • DIt makes the device or its data inaccessible until a ransom is paid
   Reveal Solution Discussion Select an answer first
5. 44application · medium

   A city deploys thousands of smart parking sensors that communicate over a low-power wireless mesh. An attacker compromises a few sensors and uses them to flood the central management server with status updates, causing the entire parking guidance system to become unresponsive. Which type of attack is the attacker primarily executing?

   • AA worm self-propagation
   • BA password sniffing attack
   • CA man-in-the-middle (MITM) attack
   • DA distributed denial-of-service (DDoS) attack
   Reveal Solution Discussion Select an answer first
6. 45foundation · easy

   In the context of IoT security, what is a backdoor?

   • AA type of malware that encrypts data for ransom
   • BA physical port on an IoT device used for debugging
   • CA hidden method of bypassing normal authentication to gain unauthorized access
   • DA firewall rule that allows all incoming traffic
   Reveal Solution Discussion Select an answer first