IOT IoT Security 1 — Questions and Answers
Question 1: Which type of attack involves an attacker intercepting communication between two IoT devices to eavesdrop or alter data?
- Man-in-the-Middle (MitM) (Correct answer)
- Denial of Service (DoS)
- SQL Injection
- Cross-Site Scripting (XSS)
Correct answer: Man-in-the-Middle (MitM)
A Man-in-the-Middle attack intercepts communications between two IoT devices to eavesdrop or manipulate data in transit.
Question 2: What is the primary purpose of device authentication in IoT security?
- To encrypt data in transit
- To verify that a device is who it claims to be before granting access (Correct answer)
- To compress data packets
- To assign IP addresses to devices
Correct answer: To verify that a device is who it claims to be before granting access
Device authentication verifies the identity of an IoT device before allowing it to connect to a network or access resources.
Question 3: Which security principle recommends that IoT devices should only have access to the minimum resources necessary to perform their function?
- Defense in Depth
- Principle of Least Privilege (Correct answer)
- Zero Trust
- Security by Obscurity
Correct answer: Principle of Least Privilege
The Principle of Least Privilege limits IoT device access rights to only what is strictly required for its intended function.
Question 4: What does TLS stand for in the context of IoT security?
- Token Layered Security
- Transport Layer Security (Correct answer)
- Timed Lock System
- Trusted Link Service
Correct answer: Transport Layer Security
TLS (Transport Layer Security) is a cryptographic protocol used to secure communications between IoT devices and servers.
Question 5: Which of the following is a common IoT security vulnerability caused by manufacturers prioritizing speed to market?
- Strong encryption
- Default or hardcoded credentials (Correct answer)
- Regular firmware updates
- Certificate pinning
Correct answer: Default or hardcoded credentials
Many IoT devices ship with default or hardcoded credentials that users never change, making them easy targets for attackers.
Question 6: What is firmware over-the-air (OTA) updating primarily used for in IoT security?
- Monitoring network traffic
- Patching security vulnerabilities without physical access (Correct answer)
- Encrypting device storage
- Managing device certificates
Correct answer: Patching security vulnerabilities without physical access
OTA firmware updates allow IoT devices to receive security patches and bug fixes remotely without requiring physical access.
IOT IoT Security 1
Which type of attack involves an attacker intercepting communication between two IoT devices to eavesdrop or alter data?