CertNexus Certified Internet of Things Practitioner (CIoTP) — Exam ITP-110 — Questions and Answers

Question 1: What does 'data normalization' mean when preparing IoT sensor data for analytics?

Deleting duplicate sensor readings
Encrypting data for secure storage
Converting data to JSON format
Scaling data values to a standard range to remove bias due to different measurement units (Correct answer)

Correct answer: Scaling data values to a standard range to remove bias due to different measurement units

Data normalization scales IoT sensor readings to a common range so that variables with different units don't disproportionately influence analytics models.

Question 2: What is the AWS IoT SiteWise service specifically designed for?

Managing residential smart home devices
Collecting, organizing, and analyzing data from industrial equipment and processes (Correct answer)
Managing retail IoT point-of-sale devices
Providing GPS tracking for IoT assets

Correct answer: Collecting, organizing, and analyzing data from industrial equipment and processes

AWS IoT SiteWise is a managed service purpose-built for collecting, organizing, and analyzing data from industrial equipment, OPC-UA servers, and manufacturing processes.

Question 3: Which lightweight operating system or runtime is designed specifically for IoT edge and embedded devices?

Windows Server 2022
Ubuntu Server 22.04
Red Hat Enterprise Linux
FreeRTOS (Correct answer)

Correct answer: FreeRTOS

FreeRTOS is a real-time operating system (RTOS) designed for microcontrollers and small embedded IoT devices with constrained memory and processing resources.

Question 4: Total types in which IoT platform is divided.

3
2
5
4 (Correct answer)

Correct answer: 4

IoT platforms are generally categorized into four main types based on their primary functionalities and focus areas. These categories often include connectivity management platforms, device management platforms, data platforms (for analytics and storage), and application enablement platforms. Each type addresses specific aspects of an IoT solution, from connecting devices to processing data and building applications.

Question 5: Which of the following IoT gateway must provide?

Simple and fast installation
Security with hardware
Protocol abstraction (Correct answer)
Data Storage

Correct answer: Protocol abstraction

An IoT gateway serves as a critical bridge between diverse IoT devices and the cloud or other networks. Since devices often use various proprietary or low-power communication protocols (e.g., Zigbee, Bluetooth), while the cloud typically uses standard internet protocols (e.g., HTTP, MQTT), the gateway must provide protocol abstraction. This involves translating data between these disparate protocols to ensure seamless interoperability and data flow across the IoT ecosystem.

Question 6: What does the OCF (Open Connectivity Foundation) standard aim to achieve in IoT?

Standardizing IoT power consumption
Enabling interoperability between IoT devices from different manufacturers (Correct answer)
Standardizing cellular IoT connections
Defining satellite IoT protocols

Correct answer: Enabling interoperability between IoT devices from different manufacturers

OCF develops standards and certifications to enable seamless and secure interoperability between IoT devices from different manufacturers.

Question 7: Which attack type floods an IoT device or network with traffic to make it unavailable to legitimate users?

Phishing
Denial of Service (DoS) (Correct answer)
Brute Force
Replay Attack

Correct answer: Denial of Service (DoS)

A Denial of Service (DoS) attack overwhelms an IoT device or network with traffic, causing it to become unresponsive.

Question 8: What is the role of a Public Key Infrastructure (PKI) in IoT security?

To synchronize device clocks
To monitor device power consumption
To provide wireless connectivity
To manage digital certificates for device identity and encryption (Correct answer)

Correct answer: To manage digital certificates for device identity and encryption

PKI manages digital certificates used to authenticate IoT device identities and establish encrypted communications.

Question 9: What is a delta update in IoT firmware management?

An update that requires device shutdown during installation
An update that resets the device to factory settings
An update that contains only the changes from the previous firmware version (Correct answer)
A full firmware image replacement delivered wirelessly

Correct answer: An update that contains only the changes from the previous firmware version

A delta update contains only the differences between old and new firmware versions, significantly reducing update size and bandwidth requirements for constrained IoT devices.

Question 10: What is the primary purpose of device authentication in IoT security?

To encrypt data in transit
To assign IP addresses to devices
To compress data packets
To verify that a device is who it claims to be before granting access (Correct answer)

Correct answer: To verify that a device is who it claims to be before granting access

Device authentication verifies the identity of an IoT device before allowing it to connect to a network or access resources.

Question 11: Total elements in the Open IoT architecture is _________.

8
5
7 (Correct answer)
6

Correct answer: 7

The Open IoT architecture is typically described as comprising seven distinct elements or layers. These layers commonly include Device, Connectivity, Gateway, Management, Analytics, Application, and Security. This comprehensive, layered structure helps in organizing and managing the various components and complexities inherent in deploying and operating IoT solutions.

Question 12: What is an 'edge node' in an IoT edge computing architecture?

A battery backup unit for IoT devices
A device or gateway at the network edge with local compute capability to process IoT data (Correct answer)
A cloud server in a remote region
A sensor with no processing capability

Correct answer: A device or gateway at the network edge with local compute capability to process IoT data

An edge node is a compute-capable device (gateway, server, or ruggedized PC) deployed at or near the IoT data source to process data locally before forwarding to the cloud.

Question 13: Who coined the term IoT?

Guido van Rossum
Kevin Ashton (Correct answer)
Ross Ihaka
IBM

Correct answer: Kevin Ashton

Kevin Ashton is widely recognized for coining the term 'Internet of Things' (IoT). He first used the phrase in 1999 while working at Procter & Gamble, where he was exploring the potential of connecting RFID technology to the internet to create a system that could track products throughout the supply chain.

Question 14: Which privacy regulation affects US IoT manufacturers regarding data collected from children under 13?

COPPA (Correct answer)
CCPA
HIPAA
GDPR

Correct answer: COPPA

COPPA (Children's Online Privacy Protection Act) requires IoT manufacturers to obtain parental consent before collecting data from children under 13.

Question 15: What is firmware over-the-air (OTA) updating primarily used for in IoT security?

Monitoring network traffic
Managing device certificates
Encrypting device storage
Patching security vulnerabilities without physical access (Correct answer)

Correct answer: Patching security vulnerabilities without physical access

OTA firmware updates allow IoT devices to receive security patches and bug fixes remotely without requiring physical access.

Question 16: Which type of IoT analytics recommends actions to optimize outcomes based on predictive model outputs?

Descriptive analytics
Predictive analytics
Prescriptive analytics (Correct answer)
Diagnostic analytics

Correct answer: Prescriptive analytics

Prescriptive analytics goes beyond prediction to recommend specific actions (e.g., schedule maintenance now) to optimize IoT system outcomes.

Question 17: What is 'store and forward' capability important for in IoT edge deployments?

Storing device logs and forwarding to auditors
Forwarding device management commands to subordinate devices
Storing credentials for deferred authentication
Buffering IoT data locally when cloud connectivity is lost and transmitting it when the connection is restored (Correct answer)

Correct answer: Buffering IoT data locally when cloud connectivity is lost and transmitting it when the connection is restored

Store and forward allows IoT edge devices to buffer data locally during network outages and reliably deliver it to the cloud once connectivity is restored, ensuring no data loss.

Question 18: What does 'decommissioning' mean in the IoT device lifecycle?

Registering a device with a management platform
Installing initial software on a new device
Securely retiring and removing a device from the network (Correct answer)
Updating device firmware to the latest version

Correct answer: Securely retiring and removing a device from the network

Device decommissioning is the process of securely removing an IoT device from service, which includes revoking credentials, wiping data, and updating the device registry.

Question 19: The term IoT was coined in?

1998
1999 (Correct answer)
2000
2001

Correct answer: 1999

The term 'Internet of Things' (IoT) was coined in 1999 by Kevin Ashton. He used the phrase during a presentation he made to Procter & Gamble, where he was exploring the potential of connecting RFID (Radio-Frequency Identification) technology to the internet. This marked an early conceptualization of a world where everyday objects could be digitally connected and communicate.

Question 20: What does the LwM2M (Lightweight M2M) protocol define for IoT device management?

A protocol for device management and service enablement on constrained IoT devices (Correct answer)
A protocol for satellite IoT communications
A protocol for high-bandwidth video streaming from IoT cameras
A standard for IoT device packaging

Correct answer: A protocol for device management and service enablement on constrained IoT devices

LwM2M is an OMA (Open Mobile Alliance) standard protocol for device management of constrained IoT devices, including bootstrapping, firmware updates, and telemetry.

Question 21: What is the primary purpose of device grouping in IoT management platforms?

To isolate malfunctioning devices from the network automatically
To limit network bandwidth per device group
To organize devices and apply policies or updates to multiple devices simultaneously (Correct answer)
To generate separate billing reports for each department

Correct answer: To organize devices and apply policies or updates to multiple devices simultaneously

Device grouping allows administrators to organize IoT devices into logical collections and apply bulk operations like firmware updates, configuration changes, or monitoring policies to the entire group.

Question 22: What is the key advantage of 'local breakout' in IoT edge architectures?

Processing and responding to IoT events locally without sending traffic to the cloud, reducing latency and costs (Correct answer)
Bypassing device security for emergency access
Breaking devices out of their enclosures for maintenance
Breaking out of vendor lock-in

Correct answer: Processing and responding to IoT events locally without sending traffic to the cloud, reducing latency and costs

Local breakout processes IoT data and makes decisions locally at the edge without routing traffic through the cloud, dramatically reducing latency and backhaul bandwidth costs.

Question 23: What is 'MEC' (Multi-access Edge Computing) in the context of 5G and IoT?

Multi-entity certification for IoT devices
A protocol for connecting multiple edge devices
Multiple Edge Cameras for surveillance
Compute infrastructure deployed within the cellular network at the radio access node, providing ultra-low latency for IoT (Correct answer)

Correct answer: Compute infrastructure deployed within the cellular network at the radio access node, providing ultra-low latency for IoT

MEC deploys cloud computing capabilities at the cellular network edge (near base stations), enabling ultra-low latency IoT applications over 5G networks.

Question 24: What do organizations need to expect as they get more dependent upon the Internet of Things (IoT)?

Security risks will go down
Security risks will increase. (Correct answer)
Security risks will be eliminated.
Security risks will stay the same

Correct answer: Security risks will increase.

As organizations increasingly rely on the Internet of Things, they integrate more connected devices into their infrastructure. Each new IoT device expands the potential attack surface, introducing new vulnerabilities and entry points for cyber threats. Therefore, a greater dependency on IoT inevitably leads to an increase in the overall security risks that organizations must manage and mitigate.

Question 25: Gwen's company is planning to accept credit cards over the Internet. Which one of the following governs this type of activity and includes provisions that Gwen should implement before accepting credit card transactions?

Communications Assistance for Law Enforcement Act (CALEA)
Health Insurance Portability and Accountability Act (HIPAA)
Payment Card Industry Data Security Standard (PCI DSS) (Correct answer)
Family Educational Rights and Privacy Act (FERPA)

Correct answer: Payment Card Industry Data Security Standard (PCI DSS)

The Payment Card Industry Data Security Standard (PCI DSS) is a set of security standards designed to ensure that all companies that process, store, or transmit credit card information maintain a secure environment. Any organization accepting credit card payments, especially over the internet, must comply with PCI DSS. This compliance is crucial to protect sensitive cardholder data and prevent fraud.

Question 26: What is the significance of 'backpressure' in IoT data pipeline design?

A mechanism to slow down data ingestion when downstream processing cannot keep up, preventing data loss (Correct answer)
Physical air pressure sensors in IoT pipelines
Network congestion from too many devices transmitting simultaneously
Pressure applied to IoT device enclosures

Correct answer: A mechanism to slow down data ingestion when downstream processing cannot keep up, preventing data loss

Backpressure in IoT pipelines allows slower downstream consumers to signal upstream components to slow data production, preventing buffer overflows and data loss.

Question 27: What is the primary challenge of 'edge device management' at scale in IoT deployments?

Remotely monitoring, updating, and troubleshooting thousands of geographically distributed devices with limited connectivity (Correct answer)
Devices being too close together physically
Edge devices having too much computing power
Managing too many network protocols on a single device

Correct answer: Remotely monitoring, updating, and troubleshooting thousands of geographically distributed devices with limited connectivity

Managing thousands of remote IoT edge devices requires robust remote update, monitoring, and diagnostics capabilities since physical access is impractical at scale.

Question 28: What is 'secure boot' in the context of IoT device security?

A method to speed up device startup
An encrypted storage partition
A remote access protocol
A process ensuring only trusted software runs during device startup (Correct answer)

Correct answer: A process ensuring only trusted software runs during device startup

Secure boot verifies the digital signature of firmware during startup, ensuring only authorized code executes on the device.

Question 29: What is a 'gateway' in an IoT architecture?

A device that bridges communication between field IoT devices and cloud/backend systems (Correct answer)
A type of IoT sensor
A cloud storage service
A user interface for IoT dashboards

Correct answer: A device that bridges communication between field IoT devices and cloud/backend systems

An IoT gateway connects field devices using local protocols (Zigbee, Bluetooth) to cloud platforms, handling protocol translation and local processing.

Question 30: Through which network does Open IoT manage registration, deployment of sensors?

X-GSN (Correct answer)
LSM
GSN
HTTP

Correct answer: X-GSN

Open IoT, an open-source platform designed for the Internet of Things, utilizes X-GSN (eXtended Global Sensor Network) to manage the registration and deployment of sensors. X-GSN provides the necessary framework and protocols for connecting, configuring, and interacting with various sensor devices within the Open IoT ecosystem. It acts as a crucial middleware layer, facilitating efficient data acquisition and device control.

Question 31: Which is NOT a market driver IoT?

Advancement in data analytics
Global adoption of non-IP networking (Correct answer)
Growth of Cloud computing
Smaller and faster computing

Correct answer: Global adoption of non-IP networking

The Internet of Things (IoT) fundamentally relies on network connectivity, and the global adoption of IP (Internet Protocol) networking is a key enabler, not a detractor. Non-IP networking would hinder, rather than drive, the widespread integration and communication of IoT devices across diverse networks. Therefore, global adoption of non-IP networking is not a market driver for IoT.

Question 32: What is 'time-series data' in the context of IoT analytics?

Encrypted data streams from IoT devices
Data organized by geographic location
Data sorted alphabetically by device name
Sequential data points collected over time from IoT sensors, indexed by timestamp (Correct answer)

Correct answer: Sequential data points collected over time from IoT sensors, indexed by timestamp

Time-series data consists of sequential IoT sensor readings timestamped at regular intervals, capturing how values change over time.

Question 33: Which service in GCP is typically used to stream real-time IoT telemetry data into analytics pipelines?

Cloud Pub/Sub (Correct answer)
Cloud Spanner
Cloud SQL
Cloud Storage

Correct answer: Cloud Pub/Sub

Google Cloud Pub/Sub is the real-time messaging service used to ingest and distribute high-volume IoT telemetry data streams into downstream analytics and storage services.

Question 34: What does TLS stand for in the context of IoT security?

Transport Layer Security (Correct answer)
Token Layered Security
Trusted Link Service
Timed Lock System

Correct answer: Transport Layer Security

TLS (Transport Layer Security) is a cryptographic protocol used to secure communications between IoT devices and servers.

Question 35: What does 'network segmentation' mean in an IoT deployment context?

Assigning multiple IP addresses to one device
Compressing network traffic
Isolating IoT devices on a separate network from critical business systems (Correct answer)
Dividing data into smaller packets for transmission

Correct answer: Isolating IoT devices on a separate network from critical business systems

Network segmentation isolates IoT devices on their own network segment to prevent a compromised device from accessing critical systems.

Question 36: What is a 'replay attack' in IoT security?

Replaying video footage from security cameras
Resetting a device to factory settings
Looping firmware update attempts
Capturing and retransmitting valid data packets to deceive a system (Correct answer)

Correct answer: Capturing and retransmitting valid data packets to deceive a system

A replay attack captures valid IoT communications and retransmits them to trick the receiving device into performing unauthorized actions.

Question 37: Which action is the best step to protect Internet of Things (IoT) devices from becoming the entry point for security vulnerabilities into a network while still meeting business requirements?

Removing IoT devices from the network
Applying security updates promptly . (Correct answer)
Using encryption for communications
Turning IoT devices off when not in use

Correct answer: Applying security updates promptly .

IoT devices are frequently targeted by attackers due to common vulnerabilities like default credentials and unpatched software. Promptly applying security updates and patches released by manufacturers is the most effective proactive measure to address known security flaws. This action significantly reduces the risk of these devices being exploited as entry points into a network, thereby protecting the entire system while allowing business operations to continue.

Question 38: Which AWS service is specifically designed for IoT device management capabilities?

AWS Direct Connect
AWS CloudFormation
AWS IoT Device Management (Correct answer)
AWS Lambda

Correct answer: AWS IoT Device Management

AWS IoT Device Management is Amazon's dedicated service for registering, organizing, monitoring, and remotely managing IoT devices at scale throughout their lifecycle.

Question 39: What is Azure IoT Hub's primary function in a Microsoft Azure IoT solution?

Running edge computing workloads on IoT devices
Serving as a managed cloud gateway that enables bidirectional communication between IoT devices and Azure services (Correct answer)
Providing a data warehouse for IoT analytics
Managing IoT device physical deployments

Correct answer: Serving as a managed cloud gateway that enables bidirectional communication between IoT devices and Azure services

Azure IoT Hub is a managed service that enables secure, reliable bidirectional communications between IoT devices and an Azure solution backend.

Question 40: What does Azure Digital Twins enable in an IoT solution?

Providing twin data centers for IoT redundancy
Duplicating IoT device firmware across multiple devices
Creating backup copies of Azure IoT Hub instances
Modeling physical environments as interconnected digital graphs of spaces, devices, and processes (Correct answer)

Correct answer: Modeling physical environments as interconnected digital graphs of spaces, devices, and processes

Azure Digital Twins enables the creation of comprehensive knowledge graphs representing physical environments — buildings, factories, cities — with live IoT data flowing through them.

Question 41: Which protocol is commonly used for edge-to-cloud synchronization of IoT device state in AWS Greengrass?

SNMP
FTP
MQTT with the Greengrass MQTT bridge (Correct answer)
Telnet

Correct answer: MQTT with the Greengrass MQTT bridge

AWS Greengrass uses an MQTT bridge to synchronize local device communications and state with AWS IoT Core in the cloud when connectivity is available.

Question 42: What is the purpose of 'time-sensitive networking' (TSN) in industrial IoT edge computing?

IEEE standards that add deterministic, low-latency guarantees to Ethernet for real-time industrial control (Correct answer)
Providing network-based time tracking for employee schedules
Limiting the time IoT devices can stay connected
Scheduling network maintenance windows

Correct answer: IEEE standards that add deterministic, low-latency guarantees to Ethernet for real-time industrial control

Time-Sensitive Networking (TSN) extends standard Ethernet with IEEE standards to provide bounded latency and deterministic delivery required for real-time industrial IoT control.

Question 43: What does 'device shadow' (also called device twin) provide in IoT cloud architecture?

An encrypted copy of device firmware
A physical backup device
A persistent virtual state of an IoT device in the cloud, accessible even when the device is offline (Correct answer)
A secondary cloud region for redundancy

Correct answer: A persistent virtual state of an IoT device in the cloud, accessible even when the device is offline

A device shadow stores the last known state of an IoT device in the cloud, allowing applications to interact with the device representation even when the device is disconnected.

Question 44: What is the primary advantage of the AMQP protocol over MQTT in enterprise IoT deployments?

Smaller packet size
Richer message routing, queuing, and enterprise broker features (Correct answer)
Lower power consumption
Longer range communications

Correct answer: Richer message routing, queuing, and enterprise broker features

AMQP (Advanced Message Queuing Protocol) offers richer routing, message acknowledgment, and enterprise-grade broker features compared to MQTT.

Question 45: Identify among the following which is not a fundamental component of IoT system?

Connectivity and data processing
User interface
Transformers (Correct answer)
Sensors

Correct answer: Transformers

A fundamental IoT system typically consists of sensors (for data collection), connectivity (for data transmission), data processing (for analysis and action), and a user interface (for interaction). Transformers, while crucial in electrical systems for altering voltage, are not considered a core, fundamental component of the *information flow* or *architectural design* of an IoT system itself.

Question 46: What is the purpose of an Intrusion Detection System (IDS) in an IoT network?

To assign IP addresses to devices
To monitor network traffic and alert on suspicious activity (Correct answer)
To encrypt device storage
To manage firmware updates

Correct answer: To monitor network traffic and alert on suspicious activity

An IDS monitors IoT network traffic for suspicious patterns or known attack signatures and generates alerts when threats are detected.

Question 47: What does 'edge-to-cloud continuum' describe in modern IoT architectures?

The continuous data flow from edge sensors to cloud storage
A seamless architecture where workloads can run at any point from device to edge to cloud based on requirements (Correct answer)
The physical cable connecting edge devices to cloud data centers
A compliance continuum for edge data regulation

Correct answer: A seamless architecture where workloads can run at any point from device to edge to cloud based on requirements

The edge-to-cloud continuum describes an architecture where IoT workloads can be placed at the optimal point — device, gateway, edge, or cloud — based on latency, privacy, and cost needs.

Question 48: What is the 'Event-Driven Architecture' (EDA) pattern commonly used for in IoT systems?

Triggering automated responses to real-time IoT events asynchronously without tight coupling (Correct answer)
Managing device firmware inventories
Providing synchronous API access to IoT data
Scheduling batch data processing jobs

Correct answer: Triggering automated responses to real-time IoT events asynchronously without tight coupling

Event-driven architecture in IoT enables decoupled, asynchronous processing where sensor events trigger downstream actions without direct service-to-service dependencies.

Question 49: Which Internet of Things (IoT) challenge involves the difficulty of developing and implementing protocols that allow devices to communicate in a standard fashion?

Compliance
Interoperability (Correct answer)
Security
Privacy

Correct answer: Interoperability

Interoperability is a significant challenge in IoT, referring to the difficulty of diverse devices, systems, and applications from different manufacturers communicating seamlessly. Without standardized communication protocols and data formats, devices struggle to understand each other. This hinders the creation of cohesive and functional IoT ecosystems.

Question 50: Which hardware technology accelerates AI inference on IoT edge devices by providing parallel computing for neural networks?

Traditional hard disk drives
Standard x86 CPUs
Neural Processing Units (NPUs) and AI accelerators like Google Coral TPU or NVIDIA Jetson (Correct answer)
Standard DDR RAM

Correct answer: Neural Processing Units (NPUs) and AI accelerators like Google Coral TPU or NVIDIA Jetson

NPUs and AI accelerators like the Google Coral TPU and NVIDIA Jetson GPU provide the parallel processing power needed to run deep learning inference efficiently on IoT edge devices.

Question 51: Which security practice assigns each IoT device a unique identity to verify legitimate access?

Data encryption
Firewall filtering
Network segmentation
Device authentication (Correct answer)

Correct answer: Device authentication

Device authentication assigns unique credentials such as certificates or keys to each IoT device, allowing the platform to verify that only authorized devices can connect.

Question 52: What challenge does 'heterogeneity' present in IoT edge computing deployments?

Too much available computing power at the edge
Excessive network bandwidth at the edge
Managing diverse hardware, operating systems, and communication protocols across a mixed fleet of edge devices (Correct answer)
Standardized device programming making updates difficult

Correct answer: Managing diverse hardware, operating systems, and communication protocols across a mixed fleet of edge devices

Heterogeneous IoT edge fleets with different CPUs, OSes, and protocols require specialized management tools to deploy, update, and monitor consistently.

Question 53: In IoT design, what is the benefit of using 'asynchronous communication' over synchronous request-response?

Devices can send data without waiting for an acknowledgment, improving throughput and resilience to temporary connectivity loss (Correct answer)
Lower data transmission costs
Simpler device programming
Lower data security requirements

Correct answer: Devices can send data without waiting for an acknowledgment, improving throughput and resilience to temporary connectivity loss

Asynchronous communication allows IoT devices to send messages and continue operating without blocking, making them resilient to temporary network outages and improving overall system throughput.

Question 54: Which edge computing concept involves training a shared machine learning model across multiple IoT edge devices without centralizing raw data?

Transfer learning
Reinforcement learning
Centralized learning
Federated learning (Correct answer)

Correct answer: Federated learning

Federated learning trains ML models collaboratively across IoT edge devices by sharing only model updates (not raw data), preserving data privacy.

Question 55: Which type of certificate is most commonly used for IoT device identity and authentication?

SSH Certificate
SSL/TLS Certificate
PGP Certificate
X.509 Certificate (Correct answer)

Correct answer: X.509 Certificate

X.509 digital certificates are the industry standard for IoT device identity and authentication, providing a PKI framework that cryptographically verifies device identity.

Question 56: Which IoT standard framework, developed by the oneM2M consortium, focuses on a horizontal platform for M2M services?

LwM2M
oneM2M (Correct answer)
OPC-UA
Alljoyn

Correct answer: oneM2M

oneM2M is a global standardization body that developed a common M2M service layer platform enabling interoperability across different IoT applications.

Question 57: Which security principle recommends that IoT devices should only have access to the minimum resources necessary to perform their function?

Principle of Least Privilege (Correct answer)
Security by Obscurity
Defense in Depth
Zero Trust

Correct answer: Principle of Least Privilege

The Principle of Least Privilege limits IoT device access rights to only what is strictly required for its intended function.

Question 58: Which US state passed the first IoT-specific cybersecurity law (SB-327) requiring reasonable security features in connected devices?

California (Correct answer)
New York
Florida
Texas

Correct answer: California

California's SB-327, effective January 2020, was the first US law requiring IoT device manufacturers to implement reasonable security features.

Question 59: Which IoT architecture concept describes the ability of a system to continue operating when some components fail?

Observability
Fault tolerance / Resilience (Correct answer)
Scalability
Interoperability

Correct answer: Fault tolerance / Resilience

Fault tolerance in IoT architecture ensures the overall system continues to function correctly even when individual devices, gateways, or services experience failures.

Question 60: What is Google Cloud IoT Core used for in a GCP IoT architecture?

Managing IoT device hardware procurement
Fully managed device registry and connection management for IoT devices communicating via MQTT or HTTP (Correct answer)
Generating AI models for IoT analytics
Providing GPS tracking for IoT devices

Correct answer: Fully managed device registry and connection management for IoT devices communicating via MQTT or HTTP

Google Cloud IoT Core provides device registry, connection management, and data ingestion for IoT devices communicating via MQTT or HTTP protocols.

Question 61: What is the 'cold path' in a Lambda architecture used for IoT data processing?

An emergency data pathway when primary systems fail
Batch processing of historical IoT data for deep analysis and model training (Correct answer)
Processing data from cold-weather IoT sensors
Processing data with low priority

Correct answer: Batch processing of historical IoT data for deep analysis and model training

In Lambda architecture, the cold path (batch layer) processes large volumes of historical IoT data offline for deep analytics and training machine learning models.

Question 62: Which scenario presents a unique challenge for developers of mobile applications?

Selecting multiple items from a list (Correct answer)
Obtaining Internet Protocol (IP) addresses
Applying encryption to network communications
Using checkboxes

Correct answer: Selecting multiple items from a list

Mobile applications often operate on devices with limited screen space and rely heavily on touch interactions. Designing an intuitive and efficient user interface for selecting multiple items from a list, especially long ones, presents a unique challenge to ensure ease of use without accidental selections or frustration. Developers must carefully consider interaction patterns like long-press, checkboxes, or drag-and-select to optimize the user experience on smaller screens.

Question 63: Which protocol operates at the application layer and is specifically designed for home automation, using a mesh network topology?

NFC
LTE-M
Zigbee (Correct answer)
Ethernet

Correct answer: Zigbee

Zigbee operates at the application layer on top of IEEE 802.15.4 and uses a mesh topology to extend range in home automation systems.

Question 64: What is the Matter protocol (formerly Project CHIP) designed to solve in smart home IoT?

Improving IoT device security certificates
Providing a unified interoperability standard across major smart home ecosystems (Correct answer)
Adding AI capabilities to devices
Increasing device battery life

Correct answer: Providing a unified interoperability standard across major smart home ecosystems

Matter is an open, royalty-free connectivity standard that enables smart home devices to work across Apple HomeKit, Google Home, Amazon Alexa, and other platforms.

Question 65: What is the purpose of a 'heartbeat' message in IoT system design?

To synchronize clocks between IoT devices
To transmit sensor health data to doctors
To periodically confirm that a device is still connected and operational (Correct answer)
To trigger emergency alerts

Correct answer: To periodically confirm that a device is still connected and operational

Heartbeat messages are periodic signals IoT devices send to confirm they are online and functioning, allowing platforms to detect disconnected or failed devices.

Question 66: What does 'data aggregation' mean in an IoT analytics pipeline?

Routing data to different cloud regions
Deleting redundant IoT data
Combining data from multiple IoT devices or sensors into a unified dataset for analysis (Correct answer)
Encrypting data before transmission

Correct answer: Combining data from multiple IoT devices or sensors into a unified dataset for analysis

Data aggregation collects and combines sensor readings from multiple IoT devices into a consolidated dataset to enable broader analysis.

Question 67: Which IoT architectural pattern separates the 'thing' from its 'internet' representation, enabling offline operation?

Saga pattern
CQRS
Device shadow/digital twin pattern (Correct answer)
Event sourcing

Correct answer: Device shadow/digital twin pattern

The device shadow pattern maintains a cloud-side representation of the device state that can be updated and read independently from the physical device's connectivity status.

Question 68: Which standard governs the HART (Highway Addressable Remote Transducer) protocol used in industrial IoT?

IEC 62443
Modbus TCP
ISA-95
HART Communication Foundation Standard (Correct answer)

Correct answer: HART Communication Foundation Standard

The HART Communication Foundation maintains the HART standard, which allows digital communication over legacy 4-20mA analog industrial instrument wiring.

Question 69: What is 'data provenance' important for in IoT analytics pipelines?

Improving sensor battery life
Increasing data processing speed
Reducing data storage costs
Tracking the origin, transformation history, and custody chain of IoT data for auditability (Correct answer)

Correct answer: Tracking the origin, transformation history, and custody chain of IoT data for auditability

Data provenance tracks where IoT data originated, how it was transformed, and who accessed it, which is essential for compliance, debugging, and trust.

Question 70: What is 'edge analytics' in an IoT deployment?

Analytics performed only in the cloud
Analysis of network edge security threats
Analytics at the network's geographic boundary
Processing and analyzing IoT data at or near the device rather than sending it all to the cloud (Correct answer)

Correct answer: Processing and analyzing IoT data at or near the device rather than sending it all to the cloud

Edge analytics processes IoT data locally on edge devices or gateways, reducing latency and bandwidth by analyzing data before it reaches the cloud.

Question 71: Kaira's company recently switched to a new calendaring system provided by a vendor. Kaira and other users connect to the system, hosted at the vendor's site, using a web browser. Which service delivery model is Kaira's company using?

Communications as a Service (CaaS)
SaaS (SaaS) (Correct answer)
Infrastructure as a Service (IaaS)
Platform as a Service (PaaS)

Correct answer: SaaS (SaaS)

Software as a Service (SaaS) is a cloud computing model where a vendor hosts applications and makes them available to customers over the internet, typically via a web browser. Users access the software without needing to install or maintain it locally, paying a subscription fee for the service. Kaira's scenario perfectly describes SaaS, as the calendaring system is hosted externally and accessed through a browser.

Question 72: State whether true or false: An IoT network is a collection of interconnected devices.

False
True (Correct answer)

Correct answer: True

This statement is true. The core definition of the Internet of Things (IoT) revolves around a network of physical objects—devices, vehicles, home appliances, and other items—that are embedded with sensors, software, and other technologies. These components enable them to connect and exchange data with other devices and systems over the internet, forming an interconnected ecosystem.

Question 73: Which of the following is a common IoT security vulnerability caused by manufacturers prioritizing speed to market?

Strong encryption
Certificate pinning
Default or hardcoded credentials (Correct answer)
Regular firmware updates

Correct answer: Default or hardcoded credentials

Many IoT devices ship with default or hardcoded credentials that users never change, making them easy targets for attackers.

Question 74: What challenge does 'concept drift' present in IoT machine learning models?

Clock synchronization issues between devices
The statistical properties of IoT data changing over time, causing models trained on old data to become less accurate (Correct answer)
IP address conflicts in IoT networks
IoT devices drifting out of their geographic zone

Correct answer: The statistical properties of IoT data changing over time, causing models trained on old data to become less accurate

Concept drift occurs when the statistical relationships IoT ML models learned from historical data change over time due to equipment aging or environmental changes, degrading model performance.

Question 75: What is the Thread protocol designed to improve upon compared to Zigbee in smart home IoT?

Power consumption only
Native IPv6 support and direct internet connectivity without a proprietary hub (Correct answer)
Longer wireless range
Higher data rates

Correct answer: Native IPv6 support and direct internet connectivity without a proprietary hub

Thread adds native IPv6 support over IEEE 802.15.4, allowing devices to connect directly to IP networks without proprietary gateways, unlike Zigbee.

Question 76: What does 'zero-touch provisioning' mean in IoT device management?

Devices that require no sensors
Security devices with no configuration required
Automatic device setup and configuration without manual intervention (Correct answer)
Devices that operate without a network connection

Correct answer: Automatic device setup and configuration without manual intervention

Zero-touch provisioning allows IoT devices to automatically register, authenticate, and configure themselves when connected to a network, eliminating the need for manual setup.

Question 77: Which type of attack involves an attacker intercepting communication between two IoT devices to eavesdrop or alter data?

Cross-Site Scripting (XSS)
Denial of Service (DoS)
SQL Injection
Man-in-the-Middle (MitM) (Correct answer)

Correct answer: Man-in-the-Middle (MitM)

A Man-in-the-Middle attack intercepts communications between two IoT devices to eavesdrop or manipulate data in transit.

Question 78: What does the IEEE 802.15.4 standard define?

Cellular LTE communications
High-speed Wi-Fi communications
Bluetooth Classic profiles
Low-rate wireless personal area networks used as the basis for Zigbee and Thread (Correct answer)

Correct answer: Low-rate wireless personal area networks used as the basis for Zigbee and Thread

IEEE 802.15.4 defines the physical and MAC layers for low-rate wireless personal area networks, forming the foundation for Zigbee, Thread, and 6LoWPAN.

Question 79: Which process involves registering an IoT device with a management platform for the first time?

Device shadowing
Device provisioning (Correct answer)
Device decommissioning
Device telemetry

Correct answer: Device provisioning

Device provisioning is the process of registering and configuring a new IoT device with the management platform, including setting credentials and initial configuration.

Question 80: What is 'containerization' used for in IoT edge deployments?

Encrypting data containers on edge devices
Physically packaging IoT sensors for shipment
Packaging edge applications with their dependencies for consistent, portable deployment across diverse edge hardware (Correct answer)
Managing IoT power supply units

Correct answer: Packaging edge applications with their dependencies for consistent, portable deployment across diverse edge hardware

Containerization (e.g., Docker) packages edge applications with all dependencies, enabling consistent deployment across heterogeneous IoT edge hardware without compatibility issues.

Question 81: Which IoT protocol uses a RESTful architecture and is designed for constrained devices, often compared to a lightweight HTTP?

AMQP
MQTT
CoAP (Correct answer)
XMPP

Correct answer: CoAP

CoAP (Constrained Application Protocol) is a RESTful protocol designed for use with constrained IoT nodes and networks.

Question 82: Which one of the following is NOT an example of store-and-forward massaging?

Telephone call (Correct answer)
Voicemail
Email
Unified messaging

Correct answer: Telephone call

Store-and-forward messaging involves sending a message to an intermediary, which then stores it until the recipient is available or retrieves it. Examples include email and voicemail, where messages are held until accessed. A traditional telephone call, however, is a real-time, synchronous communication where data is transmitted directly between parties without being stored by an intermediary for later retrieval.

Question 83: Which AWS service is used to run stream processing queries on IoT data in real time using SQL?

AWS Glue
Amazon Kinesis Data Analytics (Correct answer)
Amazon Redshift
AWS IoT Analytics

Correct answer: Amazon Kinesis Data Analytics

Amazon Kinesis Data Analytics allows real-time SQL queries on IoT data streams, enabling continuous computation on incoming sensor data without custom code.

Question 84: What is a 'botnet' in the context of IoT security threats?

A network of compromised IoT devices controlled by an attacker (Correct answer)
A firewall system for IoT networks
A protocol for device discovery
A secure network of trusted IoT devices

Correct answer: A network of compromised IoT devices controlled by an attacker

An IoT botnet is a collection of compromised devices that an attacker controls remotely, often used to launch DDoS attacks.

Question 85: What does FOTA stand for in IoT device management?

File Output Transfer Architecture
Fast Operational Technology Access
Federated Over-The-Air
Firmware Over-The-Air (Correct answer)

Correct answer: Firmware Over-The-Air

FOTA (Firmware Over-The-Air) refers to the process of remotely updating device firmware wirelessly, allowing manufacturers to fix bugs and add features without physical access.

Question 86: What does 'observability' mean in the context of IoT infrastructure operations?

Installing cameras to monitor IoT hardware
The ability to physically see IoT devices in the field
The ability to understand the internal state of IoT systems from their external outputs (logs, metrics, traces) (Correct answer)
Visibility into device power consumption

Correct answer: The ability to understand the internal state of IoT systems from their external outputs (logs, metrics, traces)

Observability in IoT operations means having sufficient logs, metrics, and traces to understand why a system is behaving a certain way without needing to inspect it directly.

Question 87: What is the role of a message broker in IoT device management?

To facilitate communication between IoT devices and management platforms (Correct answer)
To store device configuration files persistently
To manage device authentication certificates
To generate analytics reports from device telemetry

Correct answer: To facilitate communication between IoT devices and management platforms

A message broker acts as an intermediary that routes messages between IoT devices and management platforms, enabling reliable, asynchronous communication even with intermittent device connectivity.

Question 88: Which design pattern involves IoT devices publishing data to a central message broker that distributes it to interested subscribers?

Polling
Peer-to-Peer
Publish-Subscribe (Pub/Sub) (Correct answer)
Request-Response

Correct answer: Publish-Subscribe (Pub/Sub)

The Publish-Subscribe pattern decouples IoT data producers from consumers through a broker, allowing many subscribers to receive data from many publishers.

Question 89: What does 'horizontal scalability' mean for an IoT platform backend?

Adding more server instances in parallel to handle increasing IoT device connections and data volume (Correct answer)
Increasing the CPU power of a single server
Extending the wireless range of IoT gateways
Expanding the physical footprint of IoT devices

Correct answer: Adding more server instances in parallel to handle increasing IoT device connections and data volume

Horizontal scalability means adding more server instances to distribute IoT workload, enabling the platform to handle millions of concurrent device connections.

Question 90: Which cryptographic concept ensures that an IoT device's firmware has not been tampered with since it was signed?

Code signing (Correct answer)
Port scanning
Symmetric encryption
MAC address filtering

Correct answer: Code signing

Code signing uses digital signatures to verify that firmware has not been altered since it was signed by the manufacturer.

Question 91: Which IoT security framework was developed by NIST to provide guidelines for managing IoT cybersecurity risks?

OWASP IoT Top 10
PCI DSS
ISO 27001
NIST Cybersecurity Framework (Correct answer)

Correct answer: NIST Cybersecurity Framework

The NIST Cybersecurity Framework provides guidelines and best practices for managing cybersecurity risk, including for IoT deployments.

Question 92: Identify the java extension file in IoT?

.jar (Correct answer)
.py
.exe
.c

Correct answer: .jar

In the context of Java, a widely used programming language for many IoT applications and platforms, the '.jar' file extension stands for Java Archive. It is a package file format used to aggregate multiple Java class files, associated metadata, and resources into a single file. This format facilitates the efficient distribution and execution of Java-based applications and components within IoT systems.

Question 93: In IoT analytics, what does 'data labeling' refer to in the context of supervised machine learning?

Naming data streams in a database
Adding metadata tags to IoT device configurations
Labeling physical IoT devices with asset tags
Annotating historical IoT sensor data with known outcomes to train predictive models (Correct answer)

Correct answer: Annotating historical IoT sensor data with known outcomes to train predictive models

Data labeling annotates historical IoT sensor data with known outcomes (e.g., 'normal' or 'failure') so supervised learning models can learn to recognize those conditions.

Question 94: What is the purpose of the 6LoWPAN standard in IoT networking?

Managing IoT device certificates
Providing GPS location services to IoT devices
Enabling IPv6 packets to be transmitted over IEEE 802.15.4 low-power networks (Correct answer)
Encrypting IoT sensor data

Correct answer: Enabling IPv6 packets to be transmitted over IEEE 802.15.4 low-power networks

6LoWPAN adapts IPv6 packets to work over low-power IEEE 802.15.4 wireless networks by compressing headers and fragmenting packets.

Question 95: What is fleet management in the context of IoT?

Managing network bandwidth for IoT devices
Managing cloud storage for IoT sensor data
Centralized management of a large group of IoT devices as a collective (Correct answer)
Tracking the location of delivery vehicles only

Correct answer: Centralized management of a large group of IoT devices as a collective

Fleet management in IoT refers to the centralized management, monitoring, and maintenance of a large number of IoT devices as a collective group, enabling bulk operations and unified policies.

Question 96: What is Over-the-Air (OTA) update in IoT?

A security protocol for IoT communications
Wireless delivery of firmware or software updates to IoT devices (Correct answer)
Sending sensor data over a wireless network
A method for physically replacing device hardware

Correct answer: Wireless delivery of firmware or software updates to IoT devices

OTA updates allow administrators to remotely deliver firmware, software, or configuration updates to IoT devices wirelessly without physical access.

Question 97: Which of the following best describes 'zero trust security' as applied to IoT networks?

Disabling all IoT devices for security
Never trusting any device by default; always verifying before granting access (Correct answer)
Trusting all devices within the internal network perimeter
Using only wired connections for IoT devices

Correct answer: Never trusting any device by default; always verifying before granting access

Zero trust security assumes no device inside or outside the network is inherently trusted and requires continuous verification for every access request.

Question 98: In Azure IoT architecture, what is the role of Azure IoT Edge?

Providing edge network routing for Azure data centers
Managing physical IoT device installation
Providing Azure Active Directory for IoT devices
Running cloud workloads (AI, analytics, custom logic) on IoT devices at the network edge (Correct answer)

Correct answer: Running cloud workloads (AI, analytics, custom logic) on IoT devices at the network edge

Azure IoT Edge deploys containerized Azure services and custom business logic to IoT devices, enabling cloud intelligence at the edge without continuous cloud connectivity.

Question 99: What is the purpose of a 'digital twin' in IoT data analytics?

A virtual model of a physical IoT device or system, updated with real-time sensor data for simulation and analysis (Correct answer)
A duplicate device for redundancy
A backup copy of IoT device firmware
A secondary cloud region for data backup

Correct answer: A virtual model of a physical IoT device or system, updated with real-time sensor data for simulation and analysis

A digital twin is a virtual representation of a physical IoT system continuously updated with real-time data, enabling simulation, monitoring, and predictive analysis.

Question 100: Which IoT architecture layer is responsible for collecting raw data from the physical environment?

Application layer
Network layer
Perception/Sensing layer (Correct answer)
Processing layer

Correct answer: Perception/Sensing layer

The perception or sensing layer is the bottom layer of IoT architecture, comprising physical sensors and actuators that interact with the environment.

CertNexus Certified Internet of Things Practitioner (CIoTP) — Exam ITP-110

The CIoTP certification validates foundational knowledge of IoT concepts, technologies, and tools across the IoT ecosystem, covering design, implementation, operation, and management for practitioners in diverse IoT-related roles.

100

Questions

120 min

Time Limit

60%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds