Common IoT Attacks (Mirai, BrickerBot, Sybil, Blackhole) ISE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the primary purpose of the Mirai botnet after it has compromised a large number of IoT devices?

   • ATo encrypt device files and demand a ransom from the device owner
   • BTo mine cryptocurrency using the devices' processing power
   • CTo launch distributed denial-of-service (DDoS) attacks against targeted servers
   • DTo steal personal data stored on the compromised devices
   Reveal Solution Discussion Select an answer first
2. 7expert · hard · select all that apply

   A security architect is reviewing the security posture of a large IoT deployment. The architect must select controls that address multiple common attacks, including Mirai, BrickerBot, Sybil, and blackhole attacks. Which controls would be effective against at least two of these attacks? (Select all that apply.)

   • AEnforce strong unique credentials on all devices
   • BImplement mutual authentication for device-to-device communications
   • CDeploy a reputation-based routing protocol that monitors packet forwarding behavior
   • DUse a firewall to block all inbound traffic from the internet
   • ERegularly update firmware to the latest version
   Check answers Discussion Select an answer first
4. 8expert · hard

   A security analyst is investigating a smart grid network where some data packets are being dropped. The analyst suspects a blackhole attack. The analyst also notices that the network uses a routing protocol that is vulnerable to Sybil attacks. Which action would best help the analyst distinguish between a blackhole attack and a Sybil attack?

   • ACheck the devices' firmware versions for known vulnerabilities.
   • BMonitor the network for high-volume traffic to an external IP address.
   • CCompare the number of nodes in the routing table to the number of physically deployed devices.
   • DReboot the suspected malicious node and observe if the data loss stops.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A security architect is designing a secure IoT deployment for a hospital. The deployment includes thousands of medical sensors that must remain operational. The architect is concerned about Mirai-style attacks and Sybil attacks. Which combination of controls would best mitigate both threats while maintaining device availability?

   • ASegment the IoT network and use a firewall to block all inbound traffic from the internet.
   • BEnforce unique strong credentials on every device and implement mutual authentication for all network communications.
   • CDeploy an intrusion detection system (IDS) to monitor for unusual traffic patterns.
   • DUse a VPN for all device-to-server communications and disable remote management interfaces.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A network administrator is designing a secure IoT mesh network. The network must be resilient against blackhole attacks, Sybil attacks, and botnet recruitment via default credentials. Which combination of measures provides the most comprehensive protection?

   • ADisable all routing protocols to prevent routing attacks.
   • BUse a single shared password for all devices for simplicity.
   • CUse a firewall to block all inbound traffic.
   • DUse authenticated routing protocols, enforce strong unique credentials, and implement intrusion detection.
   Reveal Solution Discussion Select an answer first