CertNexus ITS-110 Quiz 1 Topic 1 Questions 1-5

Question: 1

An IoT developer has endpoints that are shipped to users in the field. Which of the following best practices must be implemented for using default passwords after delivery?

AImplement two-factor authentication (2FA)

BForce a password change upon initial login

CApply granular role-based access

DProtect against account enumeration

Show Answer

Question: 2

Which of the following tools or techniques is used by software developers to maintain code, but also used by hackers to maintain control of a compromised system?

ADisassembler

BBackdoor

CDebugger

DStack pointer

Show Answer

Question: 3

A hacker is sniffing network traffic with plans to intercept user credentials and then use them to log into remote websites. Which of the following attacks could the hacker be attempting? (Choose two.)

AMasquerading

BBrute force

CDirectory traversal

DSession replay

ESpear phishing

Show Answer

Question: 4

A hacker is able to eavesdrop on administrative sessions to remote IoT sensors. Which of the following has most likely been misconfigured or disabled?

ASecure Shell (SSH)

BInternet Protocol Security (IPSec)

CTelnet

DVirtual private network (VPN)

Show Answer

Question: 5

Which of the following describes the most significant risk created by implementing unverified certificates on an IoT portal?

AThe portal's Internet Protocol (IP) address can more easily be spoofed.

BDomain Name System (DNS) address records are more susceptible to hijacking.

CThe portal's administrative functions do not require authentication.

DMan-in-the-middle (MITM) attacks can be used to eavesdrop on communications.

Show Answer

CertNexus ITS-110 Quiz:1 Topic:1 Questions:1-5