IoT and OT Security CCT Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which IoT attack vector involves the manipulation of components or software during the manufacturing or distribution process?

   • ASupply chain attack
   • BInterface attack
   • CFirmware attack
   • DSide-channel attack
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which of the following is a common attack vector in IoT devices that involves exploiting the software that runs on the device's hardware?

   • ASocial engineering
   • BFirmware attacks
   • CPhysical tampering
   • DNetwork sniffing
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A chemical plant runs a distributed control system (DCS) that has been in operation for 20 years. The DCS controllers are not patched because the vendor no longer supports them, and the plant cannot afford downtime for upgrades. The plant's IT team proposes deploying an active vulnerability scanner on the OT network to identify weaknesses. What is the primary concern with this approach?

   • AThe scanner will generate false positives that overwhelm the security team
   • BThe scanner may cause instability or crashes in legacy controllers, leading to unsafe process disruptions
   • CThe scanner will not be able to detect vulnerabilities in proprietary protocols
   • DThe scanner will require a new server and additional licensing costs
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A logistics company is deploying IoT trackers on shipping containers. The trackers use MQTT to send location data to a central broker. The company wants to ensure that only authorized trackers can publish data and that the data cannot be read by unauthorized parties. The trackers have limited processing power and battery. Which combination of controls is most appropriate?

   • AUse MQTT over UDP to reduce overhead and rely on the network's VPN for security
   • BUse MQTT over TLS with client certificates and a broker-level access control list (ACL)
   • CUse CoAP with DTLS and a pre-shared key for each tracker
   • DUse MQTT with username/password authentication and publish data to a public topic
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which IoT architecture layer is primarily responsible for routing and forwarding data between the perception layer and the application layer?

   • AMiddleware layer
   • BApplication layer
   • CNetwork layer
   • DPerception layer
   Reveal Solution Discussion Select an answer first