ITS-110 Exam Study Guide Free Practice Test LAST UPDATED DATE Jul 22, 2024

The New ITS-110 2024 Updated Verified Study Guides & Best Courses

NEW QUESTION # 24
Which of the following policies provides the BEST protection against identity theft when data stored on an IoT portal has been compromised?

• A. Data disposal policies
• B. Data retention polices
• C. Data anonymization policies
• D. Data categorization policies

Answer: C

NEW QUESTION # 25
You work for a business-to-consumer (B2C) IoT device company. Your organization wishes to publish an annual report showing statistics related to the volume and variety of sensor data it collects. Which of the following should your organization do prior to using this information?

• A. Require customers to sign a subscription license
• B. Remove any customer-specific data
• C. Ensure all sensors are running the latest software
• D. Confirm the devices they've sold are turned on

Answer: B

NEW QUESTION # 26
An IoT system administrator discovers that unauthorized users are able to log onto and access data on remote IoT monitoring devices. What should the system administrator do on the remote devices in order to address this issue?

• A. Change default passwords
• B. Implement URL filtering
• C. Ensure all firmware updates have been applied
• D. Encrypt all locally stored data

Answer: A

NEW QUESTION # 27
An IoT software developer strives to reduce the complexity of his code to allow for efficient design and implementation. Which of the following terms describes the design principle he is implementing?

• A. Demodulation
• B. Encapsulation
• C. Calibration
• D. Abstraction

Answer: D

NEW QUESTION # 28
A software developer for an IoT device company is creating software to enhance the capabilities of his company's security cameras. He wants the end users to be confident that the software they are downloading from his company's support site is legitimate. Which of the following tools or techniques should he utilize?

• A. Interrupt analyzer
• B. Digital certificate
• C. Pseudocode
• D. Data validation

Answer: B

NEW QUESTION # 29
Which of the following attacks would most likely be used to discover users, printers, and other objects within a network?

• A. Denial of Service (DoS)
• B. SYN flood
• C. Distributed Denial of Service (DDoS)
• D. LDAP Injection

Answer: D

NEW QUESTION # 30
A developer needs to apply a family of protocols to mediate network access. Authentication and Authorization has been implemented properly. Which of the following is the missing component?

• A. Accounting
• B. Inventory
• C. Management
• D. Auditing

Answer: D

NEW QUESTION # 31
An IoT systems administrator needs to be able to detect packet injection attacks. Which of the follow methods or technologies is the administrator most likely to implement?

• A. Point-to-Point Tunneling Protocol (PPTP)
• B. Internet Protocol Security (IPSec) with Encapsulating Security Payload (ESP)
• C. Layer 2 Tunneling Protocol (L2TP)
• D. Internet Protocol Security (IPSec) with Authentication Headers (AH)

Answer: D

NEW QUESTION # 32
An IoT manufacturer discovers that hackers have injected malware into their devices' firmware updates. Which of the following methods could the manufacturer use to mitigate this risk?

• A. Ensure that firmware updates are delivered using Internet Protocol Security (IPSec)
• B. Ensure that firmware updates can only be installed by trusted administrators
• C. Ensure that all firmware updates are stored using 256-bit encryption
• D. Ensure that all firmware updates are signed with a trusted certificate

Answer: B

NEW QUESTION # 33
An IoT device which allows unprotected shell access via console ports is most vulnerable to which of the following risks?

• A. Directory harvesting
• B. Rainbow table attacks
• C. Buffer overflow
• D. Malware installation

Answer: D

NEW QUESTION # 34
In order to gain access to a user dashboard via an online portal, an end user must provide their username, a PIN, and a software token code. This process is known as:

• A. Type 1 authentication
• B. Type 2 authentication
• C. Biometric authentication
• D. Two-factor authentication

Answer: D

NEW QUESTION # 35
A hacker is sniffing network traffic with plans to intercept user credentials and then use them to log into remote websites. Which of the following attacks could the hacker be attempting? (Choose two.)

• A. Masquerading
• B. Directory traversal
• C. Session replay
• D. Spear phishing
• E. Brute force

Answer: D,E

NEW QUESTION # 36
An embedded engineer wants to implement security features to be sure that the IoT gateway under development will only load verified images. Which of the following countermeasures could be used to achieve this goal?

• A. Implement Over-The-Air (OTA) updates
• B. Harden the update server
• C. Enforce a secure boot function
• D. Enforce a measured boot function

Answer: C

NEW QUESTION # 37
Which of the following tools or techniques is used by software developers to maintain code, but also used by hackers to maintain control of a compromised system?

• A. Backdoor
• B. Debugger
• C. Disassembler
• D. Stack pointer

Answer: A

NEW QUESTION # 38
Web forms that contain unvalidated fields are vulnerable to which of the following attacks? (Choose two.)

• A. Cross-Site Scripting (XSS)
• B. Smurf
• C. Ping of death
• D. SQL Injection (SQLi)
• E. Man-in-the-middle (MITM)

Answer: A,D

NEW QUESTION # 39
A cloud developer for an IoT service is storing billing information. Which of the following should be considered a common vulnerability in regard to this data that could be used to compromise privacy?

• A. Lack of data retention policies
• B. Enabled notifications as required by law
• C. Authorized access to personal information
• D. Secured data in motion and at rest

Answer: C

NEW QUESTION # 40
A web administrator is concerned about injection attacks. Which of the following mitigation techniques should the web administrator implement?

• A. Require two-factor authentication (2FA)
• B. Parameter validation
• C. Require strong passwords
• D. Configure single sign-on (SSO)

Answer: B

NEW QUESTION # 41
You work for a multi-national IoT device vendor. Your European customers are complaining about their inability to access the personal information about them that you have collected. Which of the following regulations is your organization at risk of violating?

• A. General Data Protection Regulation (GDPR)
• B. Sarbanes-Oxley (SOX)
• C. Database Service on Alternative Methods (DB-ALM)
• D. Electronic Identification Authentication and Trust Services (elDAS)

Answer: A

NEW QUESTION # 42
A hacker is able to access privileged information via an IoT portal by modifying a SQL parameter in a URL. Which of the following BEST describes the vulnerability that allows this type of attack?

• A. Insecure HTTP session management
• B. Unsecure direct object references
• C. Unhandled malformed URLs
• D. Unvalidated redirect or forwarding

Answer: C

NEW QUESTION # 43
......

Get Prepared for Your ITS-110 Exam With Actual 102 Questions: https://www.vce4dumps.com/ITS-110-valid-torrent.html

Authentic ITS-110 Exam Dumps PDF - 2024 Updated: https://drive.google.com/open?id=1uNUly08rHBQGMQue6N3YZROSkTUcRw35