← Back to exam page

ITS-110 – Certified Internet of Things Security Practitioner(CIoTSP)

Loading demo links...

Showing 4–6 of 10 questions

Question 4

A hacker is sniffing network traffic with plans to intercept user credentials and then use them to log into remote websites. Which of the following attacks could the hacker be attempting? (Choose two.)

Select all that apply, then click Submit answer.

  • ○

    Masquerading
  • ○

    Brute force
  • ○

    Directory traversal
  • ○

    Session replay
  • ○

    Spear phishing
Question 5

You made an online purchase of a smart watch from a software as a service (SaaS) vendor, and filled out an extensive profile that will help you track several fitness variables. The vendor will provide you with customized health insights based on your profile. With which of the following regulations should the company be compliant? (Choose three.)

Select all that apply, then click Submit answer.

  • ○

    Gramm-Leach-Bliley Act (GLBA)
  • ○

    Payment Card Industry Data Security Standard (PCI-DSS)
  • ○

    Federal Information Security Management Act (FISMA)
  • ○

    Sarbanes-Oxley (SOX)
  • ○

    Health Insurance Portability and Accountability Act (HIPAA)
  • ○

    Family Educational Rights and Privacy Act (FERPA)
  • ○

    Federal Energy Regulatory Commission (FERC)
Question 6

A hacker enters credentials into a web login page and observes the server's responses. Which of the following attacks is the hacker attempting?

Select an option, then click Submit answer.

  • ○

    Account enumeration
  • ○

    Directory traversal
  • ○

    Buffer overflow
  • ○

    Spear phishing