IoT Attacks and Methodology CEH Practice Questions (Page 10)

Questions 46–48

1. 46foundation · easy

   Which protocol is often used to discover IoT devices on a local network by querying devices for their service information?

   • ASSH
   • BHTTP
   • CFTP
   • DmDNS (Multicast DNS)
   Reveal Solution Discussion Select an answer first
2. 47application · medium

   A security researcher found that a smart door lock's mobile app sends the lock's PIN in an HTTP POST parameter. The researcher wants to demonstrate a command injection attack that could unlock the door. What is the most likely injection point and payload?

   • AThe URL path; add '/admin' to access hidden functions.
   • BThe HTTP header 'User-Agent'; replace it with a long string to cause a buffer overflow in the app.
   • CThe HTTP method; change POST to PUT to bypass authentication.
   • DThe PIN parameter; submit a value like '1234; unlock' to exploit a shell command executed on the lock's firmware.
   Reveal Solution Discussion Select an answer first
3. 48expert · hard

   A security analyst extracted a firmware image from a smart lock and found that the bootloader does not verify the signature of the kernel. The analyst wants to demonstrate a persistent backdoor. Which exploitation technique is most appropriate?

   • AUse a denial-of-service attack to crash the lock's firmware.
   • BUse a buffer overflow in the lock's Bluetooth stack to gain temporary access.
   • CModify the kernel image to include a backdoor and flash it to the device.
   • DPerform a side-channel attack on the lock's cryptographic key storage.
   Reveal Solution Discussion Select an answer first