IoT Penetration Testing CPENT Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   You are assessing a wireless IoT device that uses a 433 MHz RF link to control a garage door. You have captured a signal that opens the door. You replay the captured signal and the door opens. What is the MOST effective mitigation to recommend?

   • AIncrease the transmission power of the remote to make it harder to intercept.
   • BAdd a simple checksum to the transmitted data to detect corrupted signals.
   • CImplement a rolling code scheme where each transmission uses a new code that is synchronized between the remote and the receiver.
   • DUse a higher frequency, such as 2.4 GHz, to make the signal harder to capture.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A tester is assessing a wireless door lock that uses a rolling code system. The tester captures a valid unlock signal. The tester wants to unlock the door. Which attack is most likely to succeed?

   • APerform a jam-and-replay attack
   • BUse a BLE sniffer to capture the signal
   • CReplay the captured signal immediately
   • DBrute-force the rolling code space
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which IoT communication protocol is a lightweight publish/subscribe messaging protocol commonly used on top of TCP/IP?

   • ACoAP
   • BBLE
   • CMQTT
   • DZigbee
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   When mapping the attack surface of an IoT system, which of the following is typically considered an attack surface component?

   • APhysical packaging
   • BFirmware update mechanism
   • CPower supply unit
   • DUser manual
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which tool is commonly used to capture and analyze RF signals from IoT devices?

   • AWireshark
   • BAircrack-ng
   • CHackRF One with GNU Radio
   • DBurp Suite
   Reveal Solution Discussion Select an answer first