Free CertNexus ITS-110 Practice Exam with Questions & Answers | Set: 3

Name: How to Pass ITS-110 Exams
Brand: Examstrack
SKU: its-110
Price: 36.75 USD
Availability: InStock

Questions 21

An IoT developer wants to ensure that their cloud management portal is protected against compromised end-user credentials. Which of the following technologies should the developer implement?

Options:

An authentication policy that requires a password at initial logon, and a second password in order to access advanced features.

An authentication policy which requires user passwords to include twelve characters, including uppercase, lowercase, and special characters.

An authentication policy that requires a user to provide a strong password and on-demand token delivered via SMS.

An authentication policy which requires two random tokens generated by a hardware device.

CertNexus ITS-110 Premium Access

Agoyoanye

16-Jun-2025

Success with examstrack.com is guaranteed for ITS-110. Their materials are the best!

Questions 22

A corporation's IoT security administrator has configured his IoT endpoints to send their data directly to a database using Secure Sockets Layer (SSL)/Transport Layer Security (TLS). Which entity provides the symmetric key used to secure the data in transit?

Options:

The administrator's machine

The database server

The Key Distribution Center (KDC)

The IoT endpoint

Questions 23

A network administrator is looking to implement best practices for the organization's password policy. Which of the following elements should the administrator include?

Options:

Maximum length restriction

Password history checks

No use of special characters

No password expiration

Questions 24

Which of the following technologies allows for encryption of networking communications without requiring any configuration on IoT endpoints?

Options:

Transport Layer Security (TLS)

Internet Protocol Security (IPSec)

Virtual private network (VPN)

Elliptic curve cryptography (ECC)

Questions 25

It is a new employee's first day on the job. When trying to access secured systems, he incorrectly enters his credentials multiple times. Which resulting action should take place?

Options:

His account is deleted.

He receives a new password.

His account is locked.

He notifies Human Resources.

Questions 26

Which of the following methods is an IoT portal administrator most likely to use in order to mitigate Distributed Denial of Service (DDoS) attacks?

Options:

Implement Domain Name System Security Extensions (DNSSEC) on all Internet-facing name servers

Disable Network Address Translation Traversal (NAT-T) at the border firewall

Implement traffic scrubbers on the upstream Internet Service Provider (ISP) connection

Require Internet Protocol Security (IPSec) for all inbound portal connections

Questions 27

An IoT integrator wants to deploy an IoT gateway at the Edge and have it connect to the cloud via API. In order to minimize risk, which of the following actions should the integrator take before integration?

Options:

Write down the default login and password

Remove all logins and passwords that may exist

Create new credentials using a strong password

Reset the IoT gateway to factory defaults

Questions 28

An IoT security administrator is concerned about an external attacker using the internal device management local area network (LAN) to compromise his IoT devices. Which of the following countermeasures should the security administrator implement? (Choose three.)

Options:

Require the use of Password Authentication Protocol (PAP)

Create a separate management virtual LAN (VLAN)

Ensure that all IoT management servers are running antivirus software

Implement 802.1X for authentication

Ensure that the Time To Live (TTL) flag for outgoing packets is set to 1

Only allow outbound traffic from the management LAN

Ensure that all administrators access the management server at specific times

Questions 29

A cloud developer for an IoT service is storing billing information. Which of the following should be considered a common vulnerability in regard to this data that could be used to compromise privacy?

Options:

Enabled notifications as required by law

Lack of data retention policies

Authorized access to personal information

Secured data in motion and at rest

Questions 30

During a brute force test on his users’ passwords, the security administrator found several passwords that were cracked quickly. Which of the following passwords would have taken the longest to crack?

Options:

GUESSmyPASSWORD

Gu3$$MyP@s$w0Rd

123my456password789

**myPASSword**