Question 1

A developer is coding for an IoT product in the healthcare sector. What special care must the developer take?

AMake sure the user interface looks polished so that people will pay higher prices.

BApply best practices for privacy protection to minimize sensitive data exposure.

CRapidly complete the product so that feedback from the market can be realized sooner.

DSlow down product development in order to obtain FDA approval with the first submission.

Answer : B

Question 2

A compromised IoT device is initiating random connections to an attacker's server in order to exfiltrate sensitive dat

a. Which type of attack is being used?

AMan-in-the-middle (MITM)

BSSL session hijack

CReverse shell

DHoneypot

Answer : C

Question 3

An IoT integrator wants to deploy an IoT gateway at the Edge and have it connect to the cloud via API. In order to minimize risk, which of the following actions should the integrator take before integration?

AWrite down the default login and password

BRemove all logins and passwords that may exist

CCreate new credentials using a strong password

DReset the IoT gateway to factory defaults

Answer : D

Question 4

An IoT developer discovers that clients frequently fall victim to phishing attacks. What should the developer do in order to ensure that customer accounts cannot be accessed even if the customer's password has been compromised?

AImplement two-factor authentication (2FA)

BEnable Kerberos authentication

CImplement account lockout policies

DImplement Secure Lightweight Directory Access Protocol (LDAPS)

Answer : A

Question 5

If an attacker were able to gain access to a user's machine on your network, which of the following actions would she most likely take next?

AStart log scrubbing

BEscalate privileges

CPerform port scanning

DInitiate reconnaissance