IoT Attacks and Methodology CEH Practice Questions (Page 9)

Questions 41–45

1. 41foundation · easy

   Which of the following is a common IoT attack vector that involves exploiting the device's physical ports, such as UART or JTAG?

   • ANetwork-based attack
   • BPhysical interface attack
   • CFirmware attack
   • DSide-channel attack
   Reveal Solution Discussion Select an answer first
2. 42foundation · easy

   Which tool is commonly used to extract a filesystem from an IoT firmware image for analysis?

   • AMetasploit
   • BWireshark
   • CNmap
   • DBinwalk
   Reveal Solution Discussion Select an answer first
4. 43application · medium

   A smart home hub uses MQTT to communicate with sensors and actuators. A security auditor wants to test the security of the MQTT implementation. Which vulnerability is most commonly associated with MQTT deployments?

   • ABuffer overflow in the MQTT packet parser
   • BLack of encryption and authentication, allowing message interception and spoofing
   • CCross-site scripting in the MQTT client interface
   • DSQL injection in the MQTT broker's database
   Reveal Solution Discussion Select an answer first
5. 44application · medium

   A smart lighting system uses Zigbee for communication. A security tester wants to assess the risk of unauthorized control of the lights. Which Zigbee-specific vulnerability should the tester consider?

   • AInsecure key exchange, allowing an attacker to join the network and send commands
   • BBuffer overflow in the Zigbee radio frequency
   • CSQL injection in the Zigbee protocol
   • DCross-site scripting in the Zigbee coordinator
   Reveal Solution Discussion Select an answer first
6. 45application · medium

   An ethical hacker is conducting an IoT penetration test for a client. The client has provided a list of IoT device IP addresses but no credentials. The hacker has completed the reconnaissance phase and identified that some devices are running a known vulnerable firmware version. According to a systematic IoT attack methodology, what should the hacker do next?

   • APerform post-exploitation activities such as establishing persistence
   • BImmediately exploit the known firmware vulnerability on all devices
   • CConduct a physical security assessment of the device locations
   • DScan the devices for open ports and services to identify potential entry points
   Reveal Solution Discussion Select an answer first