A hacker is able to access privileged information via an IoT portal by modifying a SQL parameter in a URL. Which of the following BEST describes the vulnerability that allows this type of attack?

• A.Unhandled malformed URLs
• B.Unvalidated redirect or forwarding
• C.Insecure HTTP session management
• D.Unsecure direct object references

Comment: *

Name: *

Email: *

Verification: *

An IoT security administrator is concerned that someone could physically connect to his network and scan for vulnerable devices. Which of the following solutions should he install to prevent this kind of attack?

• A.Network Access Control (NAC)
• B.Media Access Control (MAC)
• C.Network Intrusion Detection System (NIDS)
• D.Host Intrusion Detection System (HIDS)

Comment: *

Name: *

Email: *

Verification: *

A hacker is able to extract users' names, birth dates, height, and weight from an IoT manufacturer's user portal. Which of the following types of data has been compromised?

• A.Personal health information
• B.Personal identity information
• C.Protected health information
• D.Personally identifiable information

Comment: *

Name: *

Email: *

Verification: *

A hacker is attempting to exploit a known software flaw in an IoT portal in order to modify the site's administrative configuration. Which of the following BEST describes the type of attack the hacker is performing?

• A.Application fuzzing
• B.Transmission control protocol (TCP) flooding
• C.Birthday attack
• D.Privilege escalation

Comment: *

Name: *

Email: *

Verification: *

An IoT systems integrator has a very old IoT gateway that doesn't offer many security features besides viewing a system configuration page via browser over HTTPS. The systems integrator can't get their modern browser to bring up the page due to a cipher suite mismatch. Which of the following must the integrator perform before the configuration page can be viewed?

• A.Downgrade the browser, as modern browsers have continued allowing connections to hosts that use only outdated cipher suites.
• B.Downgrade the browser, as modern browsers have stopped allowing connections to hosts that use only outdated cipher suites.
• C.Upgrade the browser, as modern browsers have stopped allowing connections to hosts that use only outdated cipher suites.
• D.Upgrade the browser, as older browsers have stopped allowing connections to hosts that use only outdated cipher suites.

Comment: *

Name: *

Email: *

Verification: *