IOT IoT Security 1

Question 1

Which type of attack involves an attacker intercepting communication between two IoT devices to eavesdrop or alter data?

Accepted Answer

Man-in-the-Middle (MitM)

Answer

A Man-in-the-Middle attack intercepts communications between two IoT devices to eavesdrop or manipulate data in transit.

Question 2

What is the primary purpose of device authentication in IoT security?

Accepted Answer

To verify that a device is who it claims to be before granting access

Answer

Device authentication verifies the identity of an IoT device before allowing it to connect to a network or access resources.

Question 3

Which security principle recommends that IoT devices should only have access to the minimum resources necessary to perform their function?

Accepted Answer

Principle of Least Privilege

Answer

The Principle of Least Privilege limits IoT device access rights to only what is strictly required for its intended function.

Question 4

What does TLS stand for in the context of IoT security?

Accepted Answer

Transport Layer Security

Answer

TLS (Transport Layer Security) is a cryptographic protocol used to secure communications between IoT devices and servers.

Question 5

Which of the following is a common IoT security vulnerability caused by manufacturers prioritizing speed to market?

Accepted Answer

Default or hardcoded credentials

Answer

Many IoT devices ship with default or hardcoded credentials that users never change, making them easy targets for attackers.

IOT - Internet of Things Practice Test