IOT IoT Security 2 — Questions and Answers
Question 1: Which IoT security framework was developed by NIST to provide guidelines for managing IoT cybersecurity risks?
- OWASP IoT Top 10
- NIST Cybersecurity Framework (Correct answer)
- ISO 27001
- PCI DSS
Correct answer: NIST Cybersecurity Framework
The NIST Cybersecurity Framework provides guidelines and best practices for managing cybersecurity risk, including for IoT deployments.
Question 2: What is a 'botnet' in the context of IoT security threats?
- A secure network of trusted IoT devices
- A network of compromised IoT devices controlled by an attacker (Correct answer)
- A firewall system for IoT networks
- A protocol for device discovery
Correct answer: A network of compromised IoT devices controlled by an attacker
An IoT botnet is a collection of compromised devices that an attacker controls remotely, often used to launch DDoS attacks.
Question 3: Which cryptographic concept ensures that an IoT device's firmware has not been tampered with since it was signed?
- Symmetric encryption
- Code signing (Correct answer)
- Port scanning
- MAC address filtering
Correct answer: Code signing
Code signing uses digital signatures to verify that firmware has not been altered since it was signed by the manufacturer.
Question 4: What does 'network segmentation' mean in an IoT deployment context?
- Dividing data into smaller packets for transmission
- Isolating IoT devices on a separate network from critical business systems (Correct answer)
- Compressing network traffic
- Assigning multiple IP addresses to one device
Correct answer: Isolating IoT devices on a separate network from critical business systems
Network segmentation isolates IoT devices on their own network segment to prevent a compromised device from accessing critical systems.
Question 5: Which attack type floods an IoT device or network with traffic to make it unavailable to legitimate users?
- Replay Attack
- Denial of Service (DoS) (Correct answer)
- Phishing
- Brute Force
Correct answer: Denial of Service (DoS)
A Denial of Service (DoS) attack overwhelms an IoT device or network with traffic, causing it to become unresponsive.
Question 6: What is the role of a Public Key Infrastructure (PKI) in IoT security?
- To provide wireless connectivity
- To manage digital certificates for device identity and encryption (Correct answer)
- To monitor device power consumption
- To synchronize device clocks
Correct answer: To manage digital certificates for device identity and encryption
PKI manages digital certificates used to authenticate IoT device identities and establish encrypted communications.
IOT IoT Security 2
Which IoT security framework was developed by NIST to provide guidelines for managing IoT cybersecurity risks?