ITS-110 무료 덤프문제 온라인 액세스

If a site administrator wants to improve the secure access to a cloud portal, which of the following would be the BEST countermeasure to implement?

• A.Require separation of duties
• B.Require frequent password changes
• C.Utilize role-based access control (RBAC)
• D.Mandate multi-factor authentication (MFA)

An IoT security architect wants to implement Bluetooth between two nodes. The Elliptic Curve Diffie-Hellman (ECDH) cipher suite has been identified as a requirement. Which of the following Bluetooth versions can meet this requirement?

• A.Any of the BLE versions
• B.BLE v4.1
• C.Bluetooth Low Energy (BLE) v4.0
• D.BLE v4.2

In designing the campus of an IoT device manufacturer, a security consultant was hired to recommend best practices for deterring criminal behavior. Which of the following approaches would he have used to meet his client's needs?

• A.International Organization for Standardization 17799 (ISO 17799)
• B.National Institute of Standards and Technology Cybersecurity Framework (NIST CSF)
• C.Crime Prevention Through Environmental Design (CPTED)
• D.British Standard 7799 part 3 (BS 7799-3)

An IoT gateway will be brokering data on numerous northbound and southbound interfaces. A security practitioner has the data encrypted while stored on the gateway and encrypted while transmitted across the network. Should this person be concerned with privacy while the data is in use?

• A.No, since the data is already encrypted while at rest and while in motion.
• B.Yes, because the hash wouldn't protect the integrity of the data.
• C.No, because the data is inside the CPU's secure region while being used.
• D.Yes, because the data is vulnerable during processing.

A developer needs to apply a family of protocols to mediate network access. Authentication and Authorization has been implemented properly. Which of the following is the missing component?

• A.Auditing
• B.Management
• C.Accounting
• D.Inventory