Select ALL of the best practices related to IoT (more than 1)

Only purchase IoT devices that were designed with security in mind, Remove end-of-life devices, applications and OS that have become vulnerable, Infrastructure should operate under least-privilege and least-route

Semi-permanent software used to operate hardware components

Which of these is NOT an IIoT system component?

Mergers - combines the collected data from multiple sources into one log

Which of these is NOT a real ICS component?

TUP - Transferrable User Profiles

What does OWASP stand for

Open Web Application Security Project

Select ALL the Firmware examination tools (more than 1)

Strings, Binwalk, Qemu, Hexdump

Select ALL of the best practices related to IoT (more than 1)

Vendor access to IoT devices should be limited, IoT devices should be segregated from the coporate network via VLAN or ACL

What is OWASP used for?

Promotes secure cyber tool development by listing vulnerabilities

studbud

CIT - Module 8: IIoT & ICS

14 termsStudBud Administration114 plays

Imported from external platform

Flashcards14 cardsFPractice quizPHost liveL

Questions 14

Answers

1
Select ALL of the best practices related to IoT (more than 1)
Only purchase IoT devices that were designed with security in mind
IoT devices should NOT be put on separate VLANs so anyone can monitor them
Remove end-of-life devices, applications and OS that have become vulnerable
Infrastructure should operate under least-privilege and least-route
2
What is firmware?
Embedded IoT software that allows them to communicate with a network
Software that allows IoT devices to operate without a full OS
Semi-permanent software used to operate hardware components
Any software that has been locked and will not update
3
What is the name of a search engine that can be used to find and view IoT devices?
Shodan
WASP
OWASP
Shogun
4
What is the term for a coordinated group of IoT devices used for cyber attacking?
ZombieDrive
Worm Cluster
Troll Farm
Botnet
5
Which of these is NOT an IIoT system component?
Edge Components - manages all activities related to the data source
Mergers - combines the collected data from multiple sources into one log
Smart Gateway - connects components with data centers or the cloud
Connectors - how collected data is sent for processing
6
Many IoT devices lack proper security measures
False
True
7
Which of these is NOT a real ICS component?
TUP - Transferrable User Profiles
PLC - Programmable Logic Controllers
RTU - Remote Terminal Units
SCADA - Supervisory Control and Data Acquisition
8
What does OWASP stand for
Open Web Application Security Project
Open Web Authorization and Stability Procedure
Open Web Access Safety Parameters
Oh no! There's a WASP? I'm allergic!
9
Select ALL the Firmware examination tools (more than 1)
Strings
Binwalk
Qemu
Hexdump
10
What does ICS stand for?
Irregular Computing System
Infratructure Containment Solution
Industrial Control System
Irritable Computer Syndrome
11
What does IIoT stand for?
Industrial Internet of Things
Iterative Infrastructure on Technology
Industrial Information on Things
Insane Inventions of Tomorrow
12
Which of these is NOT a type of attack that can affect IoT devices
DoS or DDoS
Replay attack
VLAN hopping
On-Path (bugging or sniffing)
13
Select ALL of the best practices related to IoT (more than 1)
Only 1 employee should have unlimited access to all IoT devices
Configure the IoT device and then leave it alone
Vendor access to IoT devices should be limited
IoT devices should be segregated from the coporate network via VLAN or ACL
14
What is OWASP used for?
Tool that applies security settings onto all IoT devices from one dashboard
Open-source security tool that looks for patches for new (zero day) threats
Promotes secure cyber tool development by listing vulnerabilities
Lists and logs any known bugs in the system

CIT - Module 8: IIoT & ICS Flashcards | StudBud