[Q31-Q51] The Most Efficient ITS-110 Pdf Dumps For Assured Success [2023]

Rate this post

The Most Efficient ITS-110 Pdf Dumps For Assured Success [2023]

We offers you the latest free online ITS-110 dumps to practice

NO.31 A hacker is attempting to exploit a known software flaw in an IoT portal in order to modify the site’s administrative configuration. Which of the following BEST describes the type of attack the hacker is performing?

Privilege escalation

Transmission control protocol (TCP) flooding

Application fuzzing

Birthday attack

NO.32 A hacker was able to generate a trusted certificate that spoofs an IoT-enabled security camera’s management portal. Which of the following is the most likely cause of this exploit?

Bootloader code is stored in unsecure flash memory

The portal’s certificate is stored in unsecure flash memory

X.509 private keys are stored in unsecure flash memory

Firmware is loaded from flash using unsecure object references

NO.33 An IoT systems administrator needs to be able to detect packet injection attacks. Which of the follow methods or technologies is the administrator most likely to implement?

Internet Protocol Security (IPSec) with Encapsulating Security Payload (ESP)

Point-to-Point Tunneling Protocol (PPTP)

Layer 2 Tunneling Protocol (L2TP)

Internet Protocol Security (IPSec) with Authentication Headers (AH)

NO.34 A corporation’s IoT security administrator has configured his IoT endpoints to send their data directly to a database using Secure Sockets Layer (SSL)/Transport Layer Security (TLS). Which entity provides the symmetric key used to secure the data in transit?

The administrator’s machine

The database server

The Key Distribution Center (KDC)

The IoT endpoint

NO.35 Which of the following describes the most significant risk created by implementing unverified certificates on an IoT portal?

The portal’s Internet Protocol (IP) address can more easily be spoofed.

Domain Name System (DNS) address records are more susceptible to hijacking.

The portal’s administrative functions do not require authentication.

Man-in-the-middle (MITM) attacks can be used to eavesdrop on communications.

NO.36 In order to minimize the risk of abusing access controls, which of the following is a good example of granular access control implementation?

System administrator access

Least privilege principle

Guest account access

Discretionary access control (DAC)

NO.37 During a brute force test on his users’ passwords, the security administrator found several passwords that were cracked quickly. Which of the following passwords would have taken the longest to crack?

GUESSmyPASSWORD

Gu3$$MyP@s$w0Rd

123my456password789

**myPASSword**

NO.38 A hacker is able to access privileged information via an IoT portal by modifying a SQL parameter in a URL. Which of the following BEST describes the vulnerability that allows this type of attack?

Unvalidated redirect or forwarding

Insecure HTTP session management

Unsecure direct object references

Unhandled malformed URLs

NO.39 In order to successfully perform a man-in-the-middle (MITM) attack against a secure website, which of the following could be true?

Client to server traffic must use Hypertext Transmission Protocol (HTTP)

The server must be vulnerable to malformed Uniform Resource Locator (URL) injection

The server must be using a deprecated version of Transport Layer Security (TLS)

The web server’s X.509 certificate must be compromised

NO.40 A hacker wants to discover login names that may exist on a website. Which of the following responses to the login and password entries would aid in the discovery? (Choose two.)

Incorrect email/password combination

Your login attempt was unsuccessful

The username and/or password are incorrect

That user does not exist

Invalid password

NO.41 Which of the following attacks relies on the trust that a website has for a user’s browser?

Phishing

SQL Injection (SQLi)

Cross-Site Scripting (XSS)

Cross-Site Request Forgery (CSRF)

NO.42 A manufacturer wants to ensure that approved software is delivered securely and can be verified prior to installation on its IoT devices. Which of the following technologies allows the manufacturer to meet this requirement?

Advanced Encryption Standard (AES)

Public Key Infrastructure (PKI)

Generic Routing Encapsulation (GRE)

Internet Protocol Security (IPsec)

NO.43 An IoT security architect wants to implement Bluetooth between two nodes. The Elliptic Curve Diffie-Hellman (ECDH) cipher suite has been identified as a requirement. Which of the following Bluetooth versions can meet this requirement?

Bluetooth Low Energy (BLE) v4.0

BLE v4.2

BLE v4.1

Any of the BLE versions

NO.44 Accompany collects and stores sensitive data from thousands of IoT devices. The company’s IoT security administrator is concerned about attacks that compromise confidentiality. Which of the following attacks is the security administrator concerned about? (Choose two.)

Salami

Aggregation

Data diddling

Denial of Service (DoS)

Inference

NO.45 Which of the following methods or technologies is most likely to be used to protect an IoT portal against protocol fuzzing?

Secure Hypertext Transfer Protocol (HTTPS)

Public Key Infrastructure (PKI)

Next-Generation Firewall (NGFW)

Hash-based Message Authentication Code (HMAC)

NO.46 The network administrator for an organization has read several recent articles stating that replay attacks are on the rise. Which of the following secure protocols could the administrator implement to prevent replay attacks via remote workers’ VPNs? (Choose three.)

Internet Protocol Security (IPSec)

Enhanced Interior Gateway Routing Protocol (EIGRP)

Password Authentication Protocol (PAP)

Challenge Handshake Authentication Protocol (CHAP)

Simple Network Management Protocol (SNMP)

Layer 2 Tunneling Protocol (L2TP)

Interior Gateway Routing Protocol (IGRP)

NO.47 An IoT system administrator discovers that unauthorized users are able to log onto and access data on remote IoT monitoring devices. What should the system administrator do on the remote devices in order to address this issue?

Encrypt all locally stored data

Ensure all firmware updates have been applied

Change default passwords

Implement URL filtering

NO.48 An IoT security administrator wishes to mitigate the risk of falling victim to Distributed Denial of Service (DDoS) attacks. Which of the following mitigation strategies should the security administrator implement? (Choose two.)

Block all inbound packets with an internal source IP address

Block all inbound packets originating from service ports

Enable unused Transmission Control Protocol (TCP) service ports in order to create a honeypot

Block the use of Transmission Control Protocol (TCP) and User Datagram Protocol (UDP) through his perimeter firewall

Require the use of X.509 digital certificates for all incoming requests

NO.49 In order to gain access to a user dashboard via an online portal, an end user must provide their username, a PIN, and a software token code. This process is known as:

Type 1 authentication

Type 2 authentication

Two-factor authentication

Biometric authentication

NO.50 A user grants an IoT manufacturer consent to store personally identifiable information (PII). According to the General Data Protection Regulation (GDPR), when is an organization required to delete this data?

Within ninety days after collection, unless required for a legal proceeding

Within thirty days of a user’s written request

Within seven days of being transferred to secure, long-term storage

Within sixty days after collection, unless encrypted

NO.51 Which of the following policies provides the BEST protection against identity theft when data stored on an IoT portal has been compromised?

Data retention polices

Data categorization policies

Data anonymization policies

Data disposal policies