Online Access Free ITS-110 Exam Questions

An IoT security administrator wants to encrypt the database used to store sensitive IoT device dat a. Which of the following algorithms should he choose?

• A.Rivest-Shamir-Adleman (RSA)
• B.Triple Data Encryption Standard (3DES)
• C.Secure Hash Algorithm 3-512 (SHA3-512)
• D.ElGamal

An IoT developer wants to ensure that their cloud management portal is protected against compromised end-user credentials. Which of the following technologies should the developer implement?

• A.An authentication policy that requires a user to provide a strong password and on-demand token delivered via SMS.
• B.An authentication policy that requires a password at initial logon, and a second password in order to access advanced features.
• C.An authentication policy which requires user passwords to include twelve characters, including uppercase, lowercase, and special characters.
• D.An authentication policy which requires two random tokens generated by a hardware device.

An IoT service collects massive amounts of data and the developer is encrypting the data, forcing administrative users to authenticate and be authorized. The data is being disposed of properly and on a timely basis. However, which of the following countermeasures is the developer most likely overlooking?

• A.That private data can never be fully destroyed.
• B.That data is only valuable as perceived by the beholder.
• C.The best practice to only collect critical data and nothing more.
• D.That data isn't valuable unless it's used as evidence for crime committed.

An IoT device has many sensors on it and that sensor data is sent to the cloud. An IoT security practitioner should be sure to do which of the following in regard to that sensor data?

• A.The amount or type of data collected isn't important if you have a properly secured IoT device.
• B.Collect only the minimum amount of data required to perform all the business functions.
• C.Collect as much data as possible so as to maximize potential value of the new IoT use-case.
• D.The amount or type of data collected isn't important if you implement proper authorization controls.

A cloud developer for an IoT service is storing billing information. Which of the following should be considered a common vulnerability in regard to this data that could be used to compromise privacy?

• A.Secured data in motion and at rest
• B.Authorized access to personal information
• C.Lack of data retention policies
• D.Enabled notifications as required by law