CPL Smart Lock & IoT Security 3

Question 1

What type of cyberattack involves an adversary positioning themselves between a smart lock and its app to intercept and potentially alter communications?

Accepted Answer

Man-in-the-middle (MitM) attack

Answer

A man-in-the-middle attack intercepts communications between two parties — in this case, the smart lock and its controlling app — without either party's knowledge.

Question 2

A locksmith discovers a smart lock is running firmware from 2019 with no updates applied. Why is this a significant security concern?

Accepted Answer

Known vulnerabilities discovered since 2019 remain unpatched and exploitable

Answer

Unpatched firmware contains known security vulnerabilities that attackers can exploit using publicly documented methods, making the device a weak point in the security system.

Question 3

Which of the following is considered a best practice for securing a smart lock's administrative credentials?

Accepted Answer

Use a strong, unique password for the associated app account with MFA enabled

Answer

Using a strong unique password combined with multi-factor authentication (MFA) on the app account significantly reduces the risk of unauthorized remote access.

Question 4

What is a 'brute force' attack in the context of a smart lock's PIN keypad?

Accepted Answer

Systematically trying every possible PIN combination until the correct one is found

Answer

A brute force attack on a PIN keypad involves systematically attempting every possible code combination until the correct one unlocks the device.

Question 5

A smart lock advertises 'end-to-end encryption.' What does this mean for the security of the lock's communications?

Accepted Answer

Data is encrypted on the sender's device and only decrypted on the recipient's device, preventing intermediary access

Answer

End-to-end encryption ensures that data is encrypted at the source and can only be decrypted by the intended recipient, preventing third parties — including the manufacturer's servers — from reading the data.

(CPL) Certified Professional Locksmith Practice Test

(CPL) Certified Professional Locksmith Practice Test

CPL Smart Lock & IoT Security 3