Question

Question 1

1 point possible (graded)

True or False: Because IoT is an ecosystem, IoT Security is not just device security.

True

False

Question 2

1 point possible (graded)

When comparing IoT malware to traditional viruses, worms, or spam, which of these statements are true? (Select three)

Conventional anti-virus or anti-spam schemes work well for IoT malware detection and prevention.

IoT malware has much less user interaction.

IoT malware is hard to kill due to lack of direct interface with the infected product.

It is not easy to detect IoT malware using traditional anti-virus schemes.

Question 3

1 point possible (graded)

What are the two important security principles inside the “secure communication” stack of an IoT system: (Select two)

Device initiated connections

Device Intelligence

Edge processing

Identification, authentication and encryption

Messaging control

Remote control and update of devices

Question 4

1 point possible (graded)

True or False: In practice, when we assess IoT security, we need to model threats at three levels: device level (including data storage and firmware on device), connection levels (including communications between components in IoT ecosystem), and system levels (including APIs with cloud vendor, partner applications).

True

False

Question 5

1 point possible (graded)

Within the IoT ecosystem, “Cleartext usernames” and “Cleartext passwords” are two IoT surface areas in:

Device Memory

Device Network Services

Ecosystem Access Control

Web Cloud Interface

Question 5

1 point possible (graded)

Within the IoT ecosystem, “Cleartext usernames” and “Cleartext passwords” are two IoT surface areas in:

Device Memory

Device Network Services

Ecosystem Access Control

Web Cloud Interface

Question 5

1 point possible (graded)

Within the IoT ecosystem, “Cleartext usernames” and “Cleartext passwords” are two IoT surface areas in:

Device Memory

Device Network Services

Ecosystem Access Control

Web Cloud Interface

Question 5

1 point possible (graded)

Within the IoT ecosystem, “Cleartext usernames” and “Cleartext passwords” are two IoT surface areas in:

Device Memory

Device Network Services

Ecosystem Access Control

Web Cloud Interface

Question 6

1 point possible (graded)

User or device credentials are critical data assets in the IoT ecosystem. In “Administrative Interface,” one of OWASP IoT Attack Surface areas, what are three vulnerabilities these credential data assets may have? (Select three)

Lack of account lockout

Sent over HTTP

SQL Injection

Weak password policy

Answer 1

[1] Answer : True
Reason : Security risks in system of Internet of Things

[2]
Answer :
Conventional anti-virus or anti-spam schemes work well for IoT malware detection and prevention.
IoT malware has much less user interaction.
IoT malware is hard to kill due to lack of direct interface with the infected product.

[3]
Answer :
Identification, authentication and encryption
Remote control and update of devices

[4]
Answer : False

[5] Answer :
Ecosystem Access Control

[6]
Lack of account lockout
Sent over HTTP
Weak password policy