ITS-110 무료 덤프문제 온라인 액세스

Which of the following technologies allows for encryption of networking communications without requiring any configuration on IoT endpoints?

• A.Transport Layer Security (TLS)
• B.Elliptic curve cryptography (ECC)
• C.Virtual private network (VPN)
• D.Internet Protocol Security (IPSec)

Which of the following items should be part of an IoT software company's data retention policy?

• A.X.509 certificate expiration
• B.Transport encryption algorithms
• C.Data backup storage location
• D.Password expiration requirements

An OT security practitioner wants to implement two-factor authentication (2FA). Which of the following is the least secure method to use for implementation?

• A.Fast Identity Online (FIDO) Universal 2nd Factor (U2F) USB key
• B.2FA over Short Message Service (SMS)
• C.Authenticator Apps for smartphones
• D.Out-of-band authentication (OOBA)

A web administrator is concerned about injection attacks. Which of the following mitigation techniques should the web administrator implement?

• A.Require two-factor authentication (2FA)
• B.Parameter validation
• C.Configure single sign-on (SSO)
• D.Require strong passwords

An IoT service collects massive amounts of data and the developer is encrypting the data, forcing administrative users to authenticate and be authorized. The data is being disposed of properly and on a timely basis. However, which of the following countermeasures is the developer most likely overlooking?

• A.That private data can never be fully destroyed.
• B.That data is only valuable as perceived by the beholder.
• C.That data isn't valuable unless it's used as evidence for crime committed.
• D.The best practice to only collect critical data and nothing more.