1. What is the biggest security challenge in IoT devices?
🔘 A) Strong encryption
🔘 B) Lack of standard security protocols
🔘 C) Limited internet connectivity
🔘 D) Excessive processing power
✅ Answer: B) Lack of standard security protocols
💡 Explanation: Many IoT devices lack standardized security protocols, making them vulnerable to attacks such as unauthorized access, weak authentication, and unpatched vulnerabilities.
2. Which of the following best describes an IoT botnet?
🔘 A) A network of IoT devices used for communication
🔘 B) A set of compromised IoT devices controlled remotely
🔘 C) A cluster of IoT gateways managing data flow
🔘 D) A cloud service used to manage IoT devices
✅ Answer: B) A set of compromised IoT devices controlled remotely
💡 Explanation: Attackers infect IoT devices with malware and form a botnet to perform DDoS attacks, credential stuffing, or spam distribution.
3. What is a common vulnerability in IoT devices?
🔘 A) Complex user interfaces
🔘 B) Hardcoded default credentials
🔘 C) Large storage capacity
🔘 D) High power consumption
✅ Answer: B) Hardcoded default credentials
💡 Explanation: Many IoT devices come with default usernames and passwords, which users often fail to change, making them easy targets for attackers.
4. Which IoT communication protocol is most secure?
🔘 A) MQTT without authentication
🔘 B) HTTP over plain text
🔘 C) TLS-encrypted MQTT
🔘 D) Telnet
✅ Answer: C) TLS-encrypted MQTT
💡 Explanation: Message Queuing Telemetry Transport (MQTT) is a common IoT protocol, and using TLS encryption ensures secure communication, preventing eavesdropping and data tampering.
5. What is the Mirai botnet known for?
🔘 A) Infecting mobile devices
🔘 B) Targeting industrial control systems
🔘 C) Exploiting IoT devices for DDoS attacks
🔘 D) Spreading ransomware
✅ Answer: C) Exploiting IoT devices for DDoS attacks
💡 Explanation: The Mirai botnet infected IoT devices using default credentials and launched massive DDoS attacks against websites and infrastructure.
6. How can manufacturers improve IoT security?
🔘 A) Hardcoding passwords into firmware
🔘 B) Providing regular security patches and updates
🔘 C) Removing authentication entirely
🔘 D) Allowing unrestricted remote access
✅ Answer: B) Providing regular security patches and updates
💡 Explanation: Regular updates fix vulnerabilities and prevent attackers from exploiting outdated firmware.
7. Why is weak encryption a risk in IoT security?
🔘 A) It reduces device performance
🔘 B) It can be easily cracked by attackers
🔘 C) It slows down network communication
🔘 D) It prevents data from being stored
✅ Answer: B) It can be easily cracked by attackers
💡 Explanation: Weak encryption allows attackers to intercept and decrypt sensitive data, leading to security breaches.
8. Which IoT device is most commonly targeted by attackers?
🔘 A) Smart refrigerators
🔘 B) Smart thermostats
🔘 C) Networked security cameras
🔘 D) Bluetooth speakers
✅ Answer: C) Networked security cameras
💡 Explanation: Security cameras are often left with default credentials and exposed to the internet, making them prime targets for hackers.
9. What is a secure method for authenticating IoT devices?
🔘 A) Using default login credentials
🔘 B) Hardcoding API keys
🔘 C) Implementing multi-factor authentication (MFA)
🔘 D) Using plain text passwords
✅ Answer: C) Implementing multi-factor authentication (MFA)
💡 Explanation: MFA provides an additional layer of security, ensuring that even if a password is compromised, the device remains protected.
10. Why is firmware security important in IoT?
🔘 A) It increases device performance
🔘 B) It prevents unauthorized device access
🔘 C) It speeds up software updates
🔘 D) It reduces power consumption
✅ Answer: B) It prevents unauthorized device access
💡 Explanation: Secure firmware prevents attackers from injecting malicious code or exploiting vulnerabilities in outdated software.
11. What is the purpose of an IoT gateway?
🔘 A) To control device temperature
🔘 B) To bridge communication between IoT devices and networks
🔘 C) To store encryption keys
🔘 D) To act as a backup power source
✅ Answer: B) To bridge communication between IoT devices and networks
💡 Explanation: IoT gateways provide a secure interface between devices and networks, often filtering malicious traffic and managing data securely.
12. What is edge computing in IoT security?
🔘 A) Cloud-based storage for IoT
🔘 B) Processing data closer to the device rather than in the cloud
🔘 C) A wireless communication protocol
🔘 D) A type of attack on IoT devices
✅ Answer: B) Processing data closer to the device rather than in the cloud
💡 Explanation: Edge computing improves security by reducing the risk of data interception and exposure by keeping processing closer to the device.
13. What type of attack involves controlling multiple IoT devices to overwhelm a target?
🔘 A) SQL Injection
🔘 B) DDoS Attack
🔘 C) Phishing
🔘 D) Man-in-the-Middle Attack
✅ Answer: B) DDoS Attack
💡 Explanation: Distributed Denial of Service (DDoS) attacks involve compromised IoT devices flooding a network to make it unavailable.
14. What is an example of a weak security practice in IoT?
🔘 A) Encrypting all data in transit
🔘 B) Using default admin credentials
🔘 C) Applying security patches regularly
🔘 D) Implementing device authentication
✅ Answer: B) Using default admin credentials
💡 Explanation: Default credentials are easily guessable, allowing attackers to gain unauthorized access to IoT devices.
15. What is a common risk of cloud-connected IoT devices?
🔘 A) Increased battery life
🔘 B) Increased latency
🔘 C) Data breaches and unauthorized access
🔘 D) Reduced data availability
✅ Answer: C) Data breaches and unauthorized access
💡 Explanation: Cloud-connected devices transmit sensitive data, making them targets for hackers looking to intercept or manipulate data.
16. What is the role of a Security Operations Center (SOC) in IoT security?
🔘 A) Monitoring and responding to security threats in IoT networks
🔘 B) Manufacturing IoT devices
🔘 C) Providing cloud storage for IoT data
🔘 D) Controlling IoT device hardware
✅ Answer: A) Monitoring and responding to security threats in IoT networks
💡 Explanation: A SOC continuously monitors IoT environments to detect and mitigate cyber threats, preventing security breaches.
17. What attack method is commonly used to exploit IoT devices for cryptocurrency mining?
🔘 A) Phishing
🔘 B) Ransomware
🔘 C) Cryptojacking
🔘 D) SQL Injection
✅ Answer: C) Cryptojacking
💡 Explanation: Attackers infect IoT devices with malware that mines cryptocurrency, leading to resource exhaustion and degraded device performance.
18. Which is an example of insecure IoT data transmission?
🔘 A) Using TLS 1.2 for encryption
🔘 B) Sending data over HTTP instead of HTTPS
🔘 C) Implementing secure socket layer (SSL) connections
🔘 D) Using encrypted VPN tunnels
✅ Answer: B) Sending data over HTTP instead of HTTPS
💡 Explanation: HTTP transmits data unencrypted, allowing attackers to intercept and modify sensitive IoT communications.
19. Why is physical security important for IoT devices?
🔘 A) Prevents theft and unauthorized access to device hardware
🔘 B) Improves device speed
🔘 C) Reduces battery consumption
🔘 D) Ensures faster firmware updates
✅ Answer: A) Prevents theft and unauthorized access to device hardware
💡 Explanation: Attackers can physically access IoT devices to tamper with firmware, extract sensitive data, or gain remote access.
20. What is an example of an IoT device that can be used in an attack?
🔘 A) Smart light bulbs
🔘 B) IP security cameras
🔘 C) Smart door locks
🔘 D) All of the above
✅ Answer: D) All of the above
💡 Explanation: Any poorly secured IoT device can be exploited for botnets, unauthorized access, or network infiltration.
21. What is a Zero Trust model in IoT security?
🔘 A) Allowing only internal traffic in IoT networks
🔘 B) Eliminating encryption for better speed
🔘 C) Assuming that every device is a potential threat
🔘 D) Trusting devices within a local network automatically
✅ Answer: C) Assuming that every device is a potential threat
💡 Explanation: The Zero Trust model enforces strict authentication and continuous monitoring to prevent IoT attacks.
22. Why is over-the-air (OTA) firmware updating important for IoT security?
🔘 A) Fixes security vulnerabilities remotely
🔘 B) Increases battery life
🔘 C) Improves device aesthetics
🔘 D) Reduces power consumption
✅ Answer: A) Fixes security vulnerabilities remotely
💡 Explanation: OTA updates allow manufacturers to patch security flaws without requiring users to manually update devices.
23. What is side-channel analysis in IoT security?
🔘 A) Analyzing network traffic for threats
🔘 B) Extracting sensitive data using device emissions
🔘 C) Strengthening IoT device firewalls
🔘 D) Encrypting all IoT data
✅ Answer: B) Extracting sensitive data using device emissions
💡 Explanation: Side-channel attacks exploit power consumption, electromagnetic radiation, or timing information to infer data.
24. What does IoT device fingerprinting refer to?
🔘 A) Physically marking IoT devices
🔘 B) Identifying a device based on unique characteristics
🔘 C) Using biometric authentication for IoT devices
🔘 D) Assigning default passwords to devices
✅ Answer: B) Identifying a device based on unique characteristics
💡 Explanation: Fingerprinting analyzes network behavior, device type, and communication patterns to track IoT devices.
25. Which of the following is a secure approach to IoT device authentication?
🔘 A) Using only static passwords
🔘 B) Implementing certificate-based authentication
🔘 C) Allowing anonymous access
🔘 D) Disabling authentication for fast access
✅ Answer: B) Implementing certificate-based authentication
💡 Explanation: Digital certificates ensure secure device authentication, preventing unauthorized access.
26. What is a honeypot in IoT security?
🔘 A) A fake system set up to trap hackers
🔘 B) A software tool that encrypts IoT communications
🔘 C) A type of firewall rule
🔘 D) A cloud storage method
✅ Answer: A) A fake system set up to trap hackers
💡 Explanation: Honeypots mimic vulnerable IoT devices to analyze attacker behavior and improve defenses.
27. What is the primary goal of network segmentation in IoT security?
🔘 A) Reducing data latency
🔘 B) Isolating critical systems from compromised devices
🔘 C) Improving network speed
🔘 D) Preventing over-the-air updates
✅ Answer: B) Isolating critical systems from compromised devices
💡 Explanation: Network segmentation prevents attackers from moving laterally after compromising an IoT device.
28. What is an IoT kill switch used for?
🔘 A) Disabling compromised devices remotely
🔘 B) Increasing battery life
🔘 C) Boosting IoT communication speed
🔘 D) Connecting IoT devices to 5G
✅ Answer: A) Disabling compromised devices remotely
💡 Explanation: A kill switch allows organizations to remotely shut down infected or rogue IoT devices to prevent cyberattacks.
29. Why should IoT devices avoid using static IP addresses?
🔘 A) Static IPs are harder to remember
🔘 B) Dynamic IPs prevent easy tracking by attackers
🔘 C) Static IPs make devices consume more power
🔘 D) Static IPs increase Wi-Fi range
✅ Answer: B) Dynamic IPs prevent easy tracking by attackers
💡 Explanation: Attackers can identify and target static IP addresses, making IoT devices vulnerable to attacks.
30. What security measure prevents IoT eavesdropping attacks?
🔘 A) Strong encryption (TLS/SSL)
🔘 B) Using default passwords
🔘 C) Allowing open Wi-Fi connections
🔘 D) Sending data in plain text
✅ Answer: A) Strong encryption (TLS/SSL)
💡 Explanation: TLS/SSL encryption ensures that data remains confidential and cannot be intercepted by attackers.
31. What is the risk of using Universal Plug and Play (UPnP) in IoT devices?
🔘 A) It makes IoT devices unresponsive
🔘 B) It allows automatic device discovery, which can be exploited by attackers
🔘 C) It improves IoT encryption security
🔘 D) It prevents IoT devices from connecting to a network
✅ Answer: B) It allows automatic device discovery, which can be exploited by attackers
💡 Explanation: UPnP allows devices to connect without authentication, making them susceptible to unauthorized access and attacks.
32. Why should IoT devices avoid using hardcoded encryption keys?
🔘 A) Hardcoded keys make data transmission faster
🔘 B) Attackers can extract and reuse them to decrypt sensitive information
🔘 C) Hardcoded keys prevent device resets
🔘 D) Hardcoded keys improve battery life
✅ Answer: B) Attackers can extract and reuse them to decrypt sensitive information
💡 Explanation: Hardcoded keys cannot be changed easily, meaning if an attacker discovers them, all devices using that key become vulnerable.
33. Which type of malware specifically targets IoT devices for unauthorized control?
🔘 A) Trojan Horse
🔘 B) Ransomware
🔘 C) IoT Botnet Malware
🔘 D) Spyware
✅ Answer: C) IoT Botnet Malware
💡 Explanation: IoT botnet malware infects connected devices to create large botnets used in DDoS attacks and other cyber threats.
34. What type of attack involves an attacker pretending to be a legitimate IoT device?
🔘 A) Man-in-the-Middle (MitM) attack
🔘 B) Device Spoofing
🔘 C) ARP Poisoning
🔘 D) SQL Injection
✅ Answer: B) Device Spoofing
💡 Explanation: In device spoofing, attackers disguise a malicious device as a trusted IoT device to gain unauthorized access.
35. Why is role-based access control (RBAC) important for IoT security?
🔘 A) It ensures only authorized users can perform specific actions
🔘 B) It makes IoT devices faster
🔘 C) It allows users to bypass authentication
🔘 D) It prevents firmware updates
✅ Answer: A) It ensures only authorized users can perform specific actions
💡 Explanation: RBAC enforces strict permissions so users/devices only access what is necessary, reducing security risks.
36. Which attack exploits weak authentication in IoT devices by guessing login credentials?
🔘 A) Phishing
🔘 B) Brute Force Attack
🔘 C) Cross-Site Scripting (XSS)
🔘 D) SQL Injection
✅ Answer: B) Brute Force Attack
💡 Explanation: In brute force attacks, hackers systematically guess login credentials until they gain access to an IoT device.
37. What does the principle of “Least Privilege” mean in IoT security?
🔘 A) Users should have only the minimum access required to perform their job
🔘 B) IoT devices should be publicly accessible
🔘 C) Devices should never be updated
🔘 D) Default passwords should always be used
✅ Answer: A) Users should have only the minimum access required to perform their job
💡 Explanation: Least Privilege minimizes risks by ensuring users and devices only have the permissions they absolutely need.
38. Which attack involves attackers injecting malicious firmware into an IoT device?
🔘 A) Phishing
🔘 B) Rogue Firmware Injection
🔘 C) SQL Injection
🔘 D) Session Hijacking
✅ Answer: B) Rogue Firmware Injection
💡 Explanation: Rogue firmware injection allows attackers to install malicious software, leading to unauthorized control and data theft.
39. What is a common risk when using third-party IoT applications?
🔘 A) Increased device speed
🔘 B) Potential security vulnerabilities due to weak coding practices
🔘 C) Improved encryption security
🔘 D) Reduced power consumption
✅ Answer: B) Potential security vulnerabilities due to weak coding practices
💡 Explanation: Third-party IoT apps may not follow best security practices, making devices susceptible to attacks.
40. What security measure helps prevent replay attacks on IoT devices?
🔘 A) Using the same encryption key for all devices
🔘 B) Implementing timestamp-based authentication
🔘 C) Disabling firewalls
🔘 D) Storing plaintext passwords
✅ Answer: B) Implementing timestamp-based authentication
💡 Explanation: Replay attacks involve intercepting and reusing valid authentication messages, which can be prevented using timestamp-based tokens.
41. What risk arises from IoT devices collecting excessive user data?
🔘 A) Decreased battery performance
🔘 B) Increased risk of privacy breaches
🔘 C) Improved device performance
🔘 D) Faster network speeds
✅ Answer: B) Increased risk of privacy breaches
💡 Explanation: Collecting more data than necessary makes IoT devices a bigger target for cybercriminals.
42. What does an IoT access control list (ACL) do?
🔘 A) Defines which devices and users can access specific resources
🔘 B) Stores passwords for all IoT devices
🔘 C) Speeds up IoT communication
🔘 D) Encrypts all device data
✅ Answer: A) Defines which devices and users can access specific resources
💡 Explanation: ACLs restrict access based on IP addresses, user roles, or device types, enhancing security.
43. What is the purpose of Transport Layer Security (TLS) in IoT?
🔘 A) Encrypts communications between IoT devices
🔘 B) Increases power efficiency
🔘 C) Disables network firewalls
🔘 D) Reduces network latency
✅ Answer: A) Encrypts communications between IoT devices
💡 Explanation: TLS ensures secure communication, preventing eavesdropping and data manipulation.
44. What is a common security risk of Bluetooth-enabled IoT devices?
🔘 A) Faster battery drainage
🔘 B) Bluetooth sniffing and unauthorized access
🔘 C) Reduced Wi-Fi speed
🔘 D) Limited range
✅ Answer: B) Bluetooth sniffing and unauthorized access
💡 Explanation: Attackers can intercept unencrypted Bluetooth communications to steal data or take control of IoT devices.
45. What IoT security best practice prevents unauthorized software execution?
🔘 A) Code signing
🔘 B) Disabling encryption
🔘 C) Enabling anonymous access
🔘 D) Hardcoding passwords
✅ Answer: A) Code signing
💡 Explanation: Code signing ensures firmware/software authenticity, preventing execution of malicious or tampered code.
46. What type of attack occurs when an attacker jams IoT device signals?
🔘 A) Replay attack
🔘 B) Signal Jamming Attack
🔘 C) Cross-Site Request Forgery (CSRF)
🔘 D) XML External Entity (XXE) Injection
✅ Answer: B) Signal Jamming Attack
💡 Explanation: Attackers use radio interference to disrupt IoT device communication, causing denial-of-service.
47. Which of the following is an IoT security risk in smart home systems?
🔘 A) Default passwords on smart devices
🔘 B) Limited battery life
🔘 C) Increased internet speed
🔘 D) Faster device performance
✅ Answer: A) Default passwords on smart devices
💡 Explanation: Unchanged default passwords allow hackers to easily access and control smart home devices.
48. What is the purpose of an IoT intrusion detection system (IDS)?
🔘 A) To increase device speed
🔘 B) To monitor IoT traffic for malicious activities
🔘 C) To disable authentication on IoT devices
🔘 D) To encrypt IoT firmware
✅ Answer: B) To monitor IoT traffic for malicious activities
💡 Explanation: An IoT IDS detects suspicious behavior and alerts administrators about potential security threats.
49. What type of attack involves an attacker sending excessive network traffic to overload an IoT device?
🔘 A) Eavesdropping attack
🔘 B) Brute force attack
🔘 C) Denial-of-Service (DoS) attack
🔘 D) SQL injection
✅ Answer: C) Denial-of-Service (DoS) attack
💡 Explanation: DoS attacks flood IoT devices with traffic, causing them to crash or become unresponsive.
50. What is a common risk associated with IoT supply chain security?
🔘 A) Unverified hardware or firmware modifications
🔘 B) Faster device performance
🔘 C) Reduced data collection
🔘 D) Improved wireless range
✅ Answer: A) Unverified hardware or firmware modifications
💡 Explanation: Attackers may insert malicious hardware or firmware during manufacturing or distribution, compromising security.
51. What IoT security measure ensures a device’s software is genuine and has not been altered?
🔘 A) Device mirroring
🔘 B) Secure boot
🔘 C) Open Wi-Fi access
🔘 D) Using default passwords
✅ Answer: B) Secure boot
💡 Explanation: Secure boot verifies firmware integrity during startup, preventing unauthorized modifications or malware infections.
52. What type of attack exploits the ability of IoT devices to connect to multiple networks?
🔘 A) Phishing
🔘 B) Rogue Access Point Attack
🔘 C) Stack Overflow Attack
🔘 D) SSL Stripping
✅ Answer: B) Rogue Access Point Attack
💡 Explanation: Attackers set up a fake Wi-Fi network that IoT devices connect to, allowing them to intercept and manipulate data.
53. Which protocol is designed to securely manage IoT devices remotely?
🔘 A) HTTP
🔘 B) MQTT with TLS
🔘 C) Telnet
🔘 D) UDP
✅ Answer: B) MQTT with TLS
💡 Explanation: MQTT with TLS encryption ensures secure remote management of IoT devices, preventing unauthorized access.
54. What is an example of a side-channel attack on an IoT device?
🔘 A) Attacking network firewalls
🔘 B) Analyzing power consumption to extract cryptographic keys
🔘 C) Sending malware through email
🔘 D) Blocking IoT updates
✅ Answer: B) Analyzing power consumption to extract cryptographic keys
💡 Explanation: Side-channel attacks exploit physical characteristics of a device, like power usage or electromagnetic emissions, to extract sensitive data.
55. What is an IoT endpoint?
🔘 A) The cloud storage used for IoT data
🔘 B) Any connected IoT device that communicates over a network
🔘 C) A type of malware targeting IoT systems
🔘 D) A firewall that protects IoT networks
✅ Answer: B) Any connected IoT device that communicates over a network
💡 Explanation: An IoT endpoint refers to any smart device that collects, processes, or transmits data within an IoT ecosystem.
56. What does IoT firmware hardening involve?
🔘 A) Making firmware files smaller
🔘 B) Applying security best practices to prevent vulnerabilities
🔘 C) Removing authentication checks
🔘 D) Allowing remote access without credentials
✅ Answer: B) Applying security best practices to prevent vulnerabilities
💡 Explanation: Firmware hardening involves removing unnecessary services, enabling secure updates, and protecting code execution.
57. Which encryption method is considered best practice for IoT device communication?
🔘 A) DES
🔘 B) AES-256
🔘 C) ROT13
🔘 D) MD5
✅ Answer: B) AES-256
💡 Explanation: AES-256 encryption provides strong data security and is widely used to protect IoT communications.
58. What is a key security risk of public IoT networks?
🔘 A) Increased battery life
🔘 B) Data interception and unauthorized access
🔘 C) Improved device performance
🔘 D) Faster cloud communication
✅ Answer: B) Data interception and unauthorized access
💡 Explanation: Public networks lack proper security controls, making IoT devices susceptible to eavesdropping and attacks.
59. What attack manipulates device time settings to bypass security controls?
🔘 A) Time Synchronization Attack
🔘 B) Brute Force Attack
🔘 C) Dictionary Attack
🔘 D) Network Flooding
✅ Answer: A) Time Synchronization Attack
💡 Explanation: Time-based authentication systems can be bypassed by manipulating device time settings.
60. What is the risk of using deprecated encryption algorithms in IoT?
🔘 A) They reduce power consumption
🔘 B) They can be easily cracked by attackers
🔘 C) They improve device speed
🔘 D) They increase storage capacity
✅ Answer: B) They can be easily cracked by attackers
💡 Explanation: Older encryption algorithms (like DES and MD5) are vulnerable to brute force attacks, making them unsafe for IoT security.
61. What is a secure alternative to password-based authentication in IoT?
🔘 A) API tokens with expiration
🔘 B) Using simple numeric PINs
🔘 C) Disabling authentication
🔘 D) Using a single password for all devices
✅ Answer: A) API tokens with expiration
💡 Explanation: Expiring API tokens enhance security by ensuring authentication is temporary and less susceptible to theft.
62. What is the primary goal of IoT device monitoring?
🔘 A) Identifying security threats in real time
🔘 B) Increasing device battery life
🔘 C) Reducing device manufacturing costs
🔘 D) Boosting internet speed
✅ Answer: A) Identifying security threats in real time
💡 Explanation: Continuous monitoring helps detect anomalies, prevent attacks, and ensure device security.
63. What security feature prevents attackers from tampering with IoT device logs?
🔘 A) Logging to a remote, secure server
🔘 B) Storing logs locally without encryption
🔘 C) Deleting logs after 24 hours
🔘 D) Allowing user modifications to logs
✅ Answer: A) Logging to a remote, secure server
💡 Explanation: Remote logging ensures logs are protected from local tampering or deletion by attackers.
64. What is a common characteristic of botnet-infected IoT devices?
🔘 A) Unusual network traffic
🔘 B) Increased battery life
🔘 C) Reduced data storage
🔘 D) Slower internet connections
✅ Answer: A) Unusual network traffic
💡 Explanation: Compromised IoT devices in botnets show high network activity as they participate in DDoS attacks or other cyber threats.
65. What is the function of an IoT security gateway?
🔘 A) To store all IoT device credentials
🔘 B) To act as an intermediary that filters malicious traffic before reaching IoT devices
🔘 C) To allow unrestricted communication between IoT devices
🔘 D) To disable device encryption for faster performance
✅ Answer: B) To act as an intermediary that filters malicious traffic before reaching IoT devices
💡 Explanation: IoT security gateways monitor and filter incoming/outgoing traffic, preventing malware and unauthorized access.
66. What is an example of an IoT denial-of-sleep attack?
🔘 A) Forcing IoT devices to remain active, draining battery life
🔘 B) Preventing firmware updates
🔘 C) Blocking IoT devices from connecting to cloud services
🔘 D) Using multiple IoT devices to launch a DDoS attack
✅ Answer: A) Forcing IoT devices to remain active, draining battery life
💡 Explanation: Denial-of-sleep attacks prevent IoT devices from entering low-power sleep mode, rapidly depleting battery life.
67. What does data integrity mean in IoT security?
🔘 A) Ensuring that data remains unaltered during transmission or storage
🔘 B) Allowing users to modify data anytime
🔘 C) Increasing the speed of IoT data transmission
🔘 D) Storing IoT data without encryption
✅ Answer: A) Ensuring that data remains unaltered during transmission or storage
💡 Explanation: Data integrity ensures that data is not tampered with by attackers during transmission or storage.
68. What is a major risk of allowing remote access to IoT devices?
🔘 A) Increased energy consumption
🔘 B) Devices becoming vulnerable to unauthorized control
🔘 C) Slower internet speeds
🔘 D) Reduced storage capacity
✅ Answer: B) Devices becoming vulnerable to unauthorized control
💡 Explanation: If remote access is not properly secured, attackers can gain control of IoT devices and misuse them.
69. What is a key principle of IoT security-by-design?
🔘 A) Embedding security measures at the earliest stage of IoT device development
🔘 B) Adding security patches after product release
🔘 C) Using the same encryption for all IoT devices
🔘 D) Hardcoding usernames and passwords
✅ Answer: A) Embedding security measures at the earliest stage of IoT device development
💡 Explanation: Security-by-design ensures that IoT devices are built with strong security from the ground up, reducing future vulnerabilities.
70. What type of attack manipulates IoT sensor data to create false readings?
🔘 A) Sensor Spoofing Attack
🔘 B) Dictionary Attack
🔘 C) DDoS Attack
🔘 D) Memory Corruption Attack
✅ Answer: A) Sensor Spoofing Attack
💡 Explanation: Attackers manipulate sensor readings to cause malfunctions, misinformation, or security breaches in IoT systems.
71. What is a significant risk of IoT wearables (e.g., smartwatches, fitness trackers)?
🔘 A) High power consumption
🔘 B) Exposure of sensitive personal data if compromised
🔘 C) Limited battery life
🔘 D) Slow processing speed
✅ Answer: B) Exposure of sensitive personal data if compromised
💡 Explanation: IoT wearables collect sensitive health and location data, making them prime targets for attackers.
72. Why should IoT device logs be stored securely?
🔘 A) To reduce log file size
🔘 B) To prevent attackers from deleting or modifying forensic evidence
🔘 C) To disable security monitoring
🔘 D) To improve device boot speed
✅ Answer: B) To prevent attackers from deleting or modifying forensic evidence
💡 Explanation: Secure logging ensures that security events cannot be erased or manipulated, helping with forensic investigations.
73. What IoT security risk does improper API implementation cause?
🔘 A) Unauthorized data access and control
🔘 B) Increased battery efficiency
🔘 C) Faster cloud synchronization
🔘 D) Improved device encryption
✅ Answer: A) Unauthorized data access and control
💡 Explanation: Weak API security can lead to data breaches and unauthorized device control by attackers.
74. What security feature can prevent unauthorized firmware modifications?
🔘 A) Secure Boot and Code Signing
🔘 B) Open-source encryption
🔘 C) Disabling authentication
🔘 D) Using weak password policies
✅ Answer: A) Secure Boot and Code Signing
💡 Explanation: Secure boot and code signing ensure that only trusted, verified firmware is executed on IoT devices.
75. How can IoT manufacturers reduce supply chain security risks?
🔘 A) Conducting security audits of suppliers and third-party vendors
🔘 B) Using pre-built firmware from unverified sources
🔘 C) Allowing default credentials to remain unchanged
🔘 D) Disabling encryption to improve speed
✅ Answer: A) Conducting security audits of suppliers and third-party vendors
💡 Explanation: Verifying the security of supply chain partners helps prevent hardware backdoors and malicious firmware modifications.
76. What is a risk of IoT-enabled industrial control systems (ICS)?
🔘 A) Vulnerability to cyber-physical attacks that disrupt operations
🔘 B) Reduced power consumption
🔘 C) Faster network speeds
🔘 D) Improved data storage capacity
✅ Answer: A) Vulnerability to cyber-physical attacks that disrupt operations
💡 Explanation: Industrial IoT (IIoT) systems are vulnerable to attacks that can cause real-world disruptions in manufacturing, energy, and critical infrastructure.
77. What is an effective way to prevent brute-force attacks on IoT devices?
🔘 A) Enforcing account lockouts after multiple failed login attempts
🔘 B) Using common passwords across all devices
🔘 C) Disabling encryption
🔘 D) Allowing open network access
✅ Answer: A) Enforcing account lockouts after multiple failed login attempts
💡 Explanation: Locking accounts after repeated failed login attempts makes brute-force attacks ineffective.
78. Why is physical tamper detection important for IoT security?
🔘 A) It prevents attackers from physically modifying devices to extract sensitive data
🔘 B) It improves device performance
🔘 C) It increases device speed
🔘 D) It enhances wireless range
✅ Answer: A) It prevents attackers from physically modifying devices to extract sensitive data
💡 Explanation: Tamper-resistant hardware protects firmware, encryption keys, and sensitive information from physical attacks.
79. What is an IoT-based ransomware attack?
🔘 A) Encrypting IoT device data and demanding payment for access restoration
🔘 B) Launching a DoS attack on IoT devices
🔘 C) Manipulating IoT time settings
🔘 D) Disabling remote device access
✅ Answer: A) Encrypting IoT device data and demanding payment for access restoration
💡 Explanation: IoT ransomware locks devices or encrypts their data, forcing victims to pay attackers to regain access.
80. What is a common risk of IoT smart meters used in energy grids?
🔘 A) Tampering with readings to manipulate billing and energy distribution
🔘 B) Increased network speed
🔘 C) Better data storage
🔘 D) Reduced power consumption
✅ Answer: A) Tampering with readings to manipulate billing and energy distribution
💡 Explanation: Attackers can alter smart meter data, leading to fraudulent energy usage or grid instability.
81. What is a common risk of IoT-enabled medical devices?
🔘 A) Unauthorized access leading to data breaches or device manipulation
🔘 B) Extended battery life
🔘 C) Reduced data processing speed
🔘 D) Faster software updates
✅ Answer: A) Unauthorized access leading to data breaches or device manipulation
💡 Explanation: Unsecured medical IoT devices can be hacked to alter medical data, change dosages, or leak sensitive patient records.
82. What is the purpose of IoT threat modeling?
🔘 A) Identifying potential security risks in IoT systems
🔘 B) Improving device aesthetics
🔘 C) Speeding up IoT device boot times
🔘 D) Reducing cloud storage costs
✅ Answer: A) Identifying potential security risks in IoT systems
💡 Explanation: Threat modeling helps organizations analyze attack vectors, vulnerabilities, and countermeasures in IoT systems.
83. What type of IoT attack involves remotely hijacking a smart car’s controls?
🔘 A) Remote Code Execution (RCE) Attack
🔘 B) Drive-by Download Attack
🔘 C) ARP Spoofing
🔘 D) SQL Injection
✅ Answer: A) Remote Code Execution (RCE) Attack
💡 Explanation: RCE attacks exploit vulnerabilities in smart car systems to take control of vehicle functions like braking or acceleration.
84. Why should IoT devices avoid storing sensitive data locally?
🔘 A) It increases device speed
🔘 B) It prevents data loss in case of device theft or compromise
🔘 C) It reduces power consumption
🔘 D) It makes firmware updates unnecessary
✅ Answer: B) It prevents data loss in case of device theft or compromise
💡 Explanation: Storing data remotely or encrypting local data reduces the risk of data leaks if the device is stolen or hacked.
85. What is the main purpose of network access control (NAC) in IoT security?
🔘 A) Restricting unauthorized IoT devices from connecting to the network
🔘 B) Increasing network bandwidth
🔘 C) Enhancing device processing power
🔘 D) Improving IoT device aesthetics
✅ Answer: A) Restricting unauthorized IoT devices from connecting to the network
💡 Explanation: NAC ensures only authenticated and approved devices can access the IoT network, preventing unauthorized access.
86. What is the risk of IoT device cloning?
🔘 A) Attackers create duplicate devices to bypass authentication and infiltrate networks
🔘 B) It slows down device operations
🔘 C) It improves wireless range
🔘 D) It makes devices easier to update
✅ Answer: A) Attackers create duplicate devices to bypass authentication and infiltrate networks
💡 Explanation: Device cloning allows attackers to impersonate legitimate devices, leading to unauthorized access and data theft.
87. How does blockchain enhance IoT security?
🔘 A) Provides a tamper-proof decentralized ledger for secure transactions
🔘 B) Reduces IoT power consumption
🔘 C) Makes device updates unnecessary
🔘 D) Increases IoT network speed
✅ Answer: A) Provides a tamper-proof decentralized ledger for secure transactions
💡 Explanation: Blockchain technology enhances security by ensuring data integrity and preventing unauthorized modifications.
88. What is the risk of IoT-enabled security cameras?
🔘 A) They can be hacked to spy on users or launch DDoS attacks
🔘 B) They increase internet speed
🔘 C) They consume more energy than other IoT devices
🔘 D) They improve network bandwidth
✅ Answer: A) They can be hacked to spy on users or launch DDoS attacks
💡 Explanation: Poorly secured IoT cameras can be remotely accessed by attackers for espionage or botnet recruitment.
89. What security protocol is recommended for securing IoT Wi-Fi connections?
🔘 A) WPA3
🔘 B) WEP
🔘 C) Open Wi-Fi
🔘 D) HTTP
✅ Answer: A) WPA3
💡 Explanation: WPA3 encryption provides stronger security than older standards like WPA2 or WEP, protecting IoT devices from attacks.
90. What is a common security risk of smart door locks?
🔘 A) Vulnerabilities allowing attackers to bypass authentication and unlock doors remotely
🔘 B) Reduced battery life
🔘 C) Increased device aesthetics
🔘 D) Limited connectivity
✅ Answer: A) Vulnerabilities allowing attackers to bypass authentication and unlock doors remotely
💡 Explanation: Poorly secured smart locks can be hacked, allowing unauthorized access to homes and buildings.
91. What is an IoT honeypot used for?
🔘 A) Attracting and analyzing cyber attackers to study their techniques
🔘 B) Increasing IoT bandwidth
🔘 C) Improving device aesthetics
🔘 D) Preventing firmware updates
✅ Answer: A) Attracting and analyzing cyber attackers to study their techniques
💡 Explanation: Honeypots mimic vulnerable IoT devices to trap hackers and gather intelligence on their tactics.
92. What is an effective way to secure IoT firmware updates?
🔘 A) Using digitally signed and encrypted updates
🔘 B) Disabling firmware updates
🔘 C) Downloading updates from unverified sources
🔘 D) Allowing updates without authentication
✅ Answer: A) Using digitally signed and encrypted updates
💡 Explanation: Signed and encrypted firmware updates prevent attackers from injecting malicious code into IoT devices.
93. What is an IoT digital twin?
🔘 A) A virtual replica of a physical IoT device used for monitoring and simulation
🔘 B) A clone of an IoT device created by hackers
🔘 C) An extra IoT device used for redundancy
🔘 D) A backup encryption method
✅ Answer: A) A virtual replica of a physical IoT device used for monitoring and simulation
💡 Explanation: Digital twins allow real-time monitoring and predictive analysis of IoT devices without directly affecting operations.
94. What is the purpose of intrusion prevention systems (IPS) in IoT networks?
🔘 A) Actively blocking detected threats before they cause harm
🔘 B) Increasing IoT bandwidth
🔘 C) Improving wireless signal strength
🔘 D) Storing encryption keys
✅ Answer: A) Actively blocking detected threats before they cause harm
💡 Explanation: IPS detects and blocks malicious traffic, preventing IoT security breaches.
95. Why is network segmentation important for IoT security?
🔘 A) It isolates critical devices from potential threats
🔘 B) It increases IoT device battery life
🔘 C) It improves Wi-Fi signal strength
🔘 D) It speeds up device boot times
✅ Answer: A) It isolates critical devices from potential threats
💡 Explanation: Segmentation prevents attackers from moving laterally between IoT devices and critical systems.
96. What is the primary security concern with IoT edge computing?
🔘 A) Increased latency in data transmission
🔘 B) Risk of local device compromise due to decentralized processing
🔘 C) Increased cloud storage costs
🔘 D) Limited bandwidth availability
✅ Answer: B) Risk of local device compromise due to decentralized processing
💡 Explanation: Edge computing processes data locally, reducing reliance on cloud infrastructure but making edge devices a prime target for cyberattacks.
97. What is the primary function of a hardware security module (HSM) in IoT?
🔘 A) To speed up IoT device communication
🔘 B) To provide secure storage for cryptographic keys and sensitive data
🔘 C) To reduce device manufacturing costs
🔘 D) To allow anonymous access to IoT networks
✅ Answer: B) To provide secure storage for cryptographic keys and sensitive data
💡 Explanation: HSMs protect encryption keys and sensitive credentials, reducing the risk of data breaches and unauthorized access.
98. How does the lack of entropy impact IoT security?
🔘 A) It makes encryption keys predictable and vulnerable to attacks
🔘 B) It increases device processing speed
🔘 C) It improves wireless communication
🔘 D) It reduces battery consumption
✅ Answer: A) It makes encryption keys predictable and vulnerable to attacks
💡 Explanation: IoT devices often lack sufficient randomness (entropy), making their encryption keys easier to crack.
99. What is a common vulnerability in IoT-enabled smart cities?
🔘 A) Poorly secured public infrastructure devices that can be remotely manipulated
🔘 B) Increased street lighting efficiency
🔘 C) Improved Wi-Fi coverage
🔘 D) Faster emergency response times
✅ Answer: A) Poorly secured public infrastructure devices that can be remotely manipulated
💡 Explanation: Smart city IoT systems (traffic lights, CCTV, smart grids) can be hacked if not properly secured, leading to public safety risks.
100. What is an IoT deep packet inspection (DPI) tool used for?
🔘 A) Analyzing IoT network traffic for threats and anomalies
🔘 B) Increasing device processing speed
🔘 C) Improving battery efficiency
🔘 D) Disabling encryption for faster performance
✅ Answer: A) Analyzing IoT network traffic for threats and anomalies
💡 Explanation: DPI tools inspect network traffic at a granular level to detect malicious activity and prevent cyber threats.
101. What is an effective way to prevent IoT side-channel attacks?
🔘 A) Using constant power consumption methods to prevent data leaks
🔘 B) Increasing Wi-Fi signal strength
🔘 C) Reducing IoT device storage capacity
🔘 D) Disabling encryption
✅ Answer: A) Using constant power consumption methods to prevent data leaks
💡 Explanation: Side-channel attacks analyze power usage or electromagnetic emissions to extract secrets, and constant power draw techniques reduce this risk.
102. What is a primary risk of insecure IoT APIs?
🔘 A) Attackers can manipulate device functionality or extract sensitive data
🔘 B) Reduced device power consumption
🔘 C) Improved software update speeds
🔘 D) Increased data transmission rates
✅ Answer: A) Attackers can manipulate device functionality or extract sensitive data
💡 Explanation: Weak API security exposes IoT devices to unauthorized access, data leaks, and control manipulation.
103. What does device attestation help with in IoT security?
🔘 A) Verifying the identity and integrity of an IoT device before allowing access
🔘 B) Increasing battery life
🔘 C) Allowing unverified firmware updates
🔘 D) Disabling authentication mechanisms
✅ Answer: A) Verifying the identity and integrity of an IoT device before allowing access
💡 Explanation: Device attestation ensures that only trusted devices can connect to networks and services, reducing security risks.
104. Why is physical access control important for IoT data centers?
🔘 A) Prevents unauthorized personnel from tampering with hardware and sensitive data
🔘 B) Increases data storage capacity
🔘 C) Speeds up network connectivity
🔘 D) Reduces power consumption
✅ Answer: A) Prevents unauthorized personnel from tampering with hardware and sensitive data
💡 Explanation: Unauthorized physical access can lead to hardware tampering, data breaches, and compromised device security.
105. What security risk does IoT-based drone technology pose?
🔘 A) Drones can be hijacked and used for malicious activities
🔘 B) Drones increase signal strength in remote areas
🔘 C) Drones consume less power than traditional IoT devices
🔘 D) Drones improve supply chain security
✅ Answer: A) Drones can be hijacked and used for malicious activities
💡 Explanation: If drone IoT systems are not properly secured, attackers can take control, steal data, or use drones for surveillance.
106. What is a security risk associated with IoT biometric authentication?
🔘 A) Biometric data, once stolen, cannot be changed like passwords
🔘 B) Biometric authentication reduces device processing speed
🔘 C) It increases encryption complexity
🔘 D) It prevents firmware updates
✅ Answer: A) Biometric data, once stolen, cannot be changed like passwords
💡 Explanation: Unlike passwords, compromised biometric data (fingerprints, facial recognition) cannot be reset, making stolen credentials permanent security risks.
107. Why is IoT botnet detection challenging?
🔘 A) IoT devices often have limited logging and security monitoring capabilities
🔘 B) Botnets improve IoT network speeds
🔘 C) Most IoT devices have built-in antivirus
🔘 D) Botnets help devices consume less power
✅ Answer: A) IoT devices often have limited logging and security monitoring capabilities
💡 Explanation: IoT devices lack extensive security features, making it difficult to detect malware infections and botnet activity.
108. How does multi-factor authentication (MFA) improve IoT security?
🔘 A) Requires additional verification beyond just a password
🔘 B) Reduces encryption overhead
🔘 C) Allows anonymous access
🔘 D) Improves data transmission speeds
✅ Answer: A) Requires additional verification beyond just a password
💡 Explanation: MFA enhances security by adding an extra authentication layer, reducing the risk of unauthorized access.
109. What is a common issue with IoT remote access services?
🔘 A) They can be exploited if improperly configured, leading to unauthorized access
🔘 B) They increase device battery life
🔘 C) They improve IoT bandwidth
🔘 D) They prevent DDoS attacks
✅ Answer: A) They can be exploited if improperly configured, leading to unauthorized access
💡 Explanation: Exposed remote access services (such as Telnet, SSH, or RDP) can be abused by attackers if not secured properly.
110. What does IoT forensics focus on?
🔘 A) Investigating and analyzing security incidents involving IoT devices
🔘 B) Increasing device battery efficiency
🔘 C) Enhancing IoT device signal strength
🔘 D) Reducing the cost of IoT cloud storage
✅ Answer: A) Investigating and analyzing security incidents involving IoT devices
💡 Explanation: IoT forensics involves recovering evidence from compromised devices, analyzing attack methods, and preventing future breaches.
111. What is the role of AI in enhancing IoT security?
🔘 A) Detecting anomalies and suspicious behavior in real time
🔘 B) Reducing power consumption in IoT devices
🔘 C) Disabling encryption to improve performance
🔘 D) Improving internet speed
✅ Answer: A) Detecting anomalies and suspicious behavior in real time
💡 Explanation: AI-based security systems analyze patterns and detect anomalies that indicate potential cyber threats in IoT networks.
112. What is an example of IoT physical layer security?
🔘 A) Preventing unauthorized access to device firmware
🔘 B) Encrypting network traffic
🔘 C) Implementing tamper-resistant hardware
🔘 D) Using default usernames and passwords
✅ Answer: C) Implementing tamper-resistant hardware
💡 Explanation: Physical security measures like tamper detection prevent attackers from modifying or extracting sensitive data from IoT devices.
113. How can IoT devices be protected against replay attacks?
🔘 A) Using timestamp-based authentication mechanisms
🔘 B) Allowing unauthenticated access
🔘 C) Storing passwords in plaintext
🔘 D) Reducing device encryption
✅ Answer: A) Using timestamp-based authentication mechanisms
💡 Explanation: Timestamp-based authentication ensures that intercepted authentication requests cannot be reused by attackers.
114. What is the primary security risk of IoT wearables used in corporate environments?
🔘 A) They can be used as entry points for network breaches
🔘 B) They improve employee productivity
🔘 C) They reduce network bandwidth
🔘 D) They increase battery efficiency
✅ Answer: A) They can be used as entry points for network breaches
💡 Explanation: Unsecured wearables connected to corporate networks can be exploited to gain unauthorized access to sensitive business data.
115. What is IoT data exfiltration?
🔘 A) Unauthorized transfer of sensitive data from IoT devices
🔘 B) Deleting stored data from IoT devices
🔘 C) Compressing IoT data to save storage space
🔘 D) Encrypting IoT data for protection
✅ Answer: A) Unauthorized transfer of sensitive data from IoT devices
💡 Explanation: Attackers use various techniques (malware, unauthorized API access) to extract sensitive information from IoT devices.
116. What does device lifecycle management in IoT security involve?
🔘 A) Managing security updates from deployment to decommissioning
🔘 B) Reducing the device size for portability
🔘 C) Increasing the device’s internet speed
🔘 D) Disabling device encryption after installation
✅ Answer: A) Managing security updates from deployment to decommissioning
💡 Explanation: Lifecycle management ensures that IoT devices receive security updates and are properly decommissioned to prevent security risks.
117. What is an example of insecure IoT network segmentation?
🔘 A) Placing IoT devices and critical infrastructure on the same network
🔘 B) Using VLANs to separate IoT devices from sensitive systems
🔘 C) Encrypting all network traffic
🔘 D) Using firewalls to monitor traffic
✅ Answer: A) Placing IoT devices and critical infrastructure on the same network
💡 Explanation: Poor network segmentation allows compromised IoT devices to act as entry points for lateral movement into critical systems.
118. What is the risk of using IoT devices with unsupported firmware?
🔘 A) Devices will not receive security updates, making them vulnerable to attacks
🔘 B) Devices will consume more power
🔘 C) Devices will operate at a slower speed
🔘 D) Devices will have reduced storage
✅ Answer: A) Devices will not receive security updates, making them vulnerable to attacks
💡 Explanation: Unsupported firmware lacks security patches, leaving devices open to exploitation by attackers.
119. What is a key concern of IoT-based industrial control systems (ICS)?
🔘 A) Cyber-physical attacks that disrupt critical infrastructure
🔘 B) Increased manufacturing efficiency
🔘 C) Reduced data processing speed
🔘 D) Enhanced system automation
✅ Answer: A) Cyber-physical attacks that disrupt critical infrastructure
💡 Explanation: ICS IoT devices control physical processes, and attacks on these systems can lead to equipment damage, power grid failures, or safety hazards.
120. Why should IoT devices use ephemeral encryption keys?
🔘 A) They reduce the impact of key compromise by frequently changing
🔘 B) They speed up encryption processing
🔘 C) They increase device storage
🔘 D) They enhance battery efficiency
✅ Answer: A) They reduce the impact of key compromise by frequently changing
💡 Explanation: Ephemeral encryption keys change frequently, limiting an attacker’s ability to decrypt data if a key is compromised.
121. What is the danger of excessive permissions in IoT applications?
🔘 A) Attackers can exploit overprivileged applications to escalate privileges
🔘 B) Applications run faster
🔘 C) IoT devices consume less power
🔘 D) IoT devices improve network speed
✅ Answer: A) Attackers can exploit overprivileged applications to escalate privileges
💡 Explanation: Granting excessive permissions increases the attack surface, allowing attackers to exploit vulnerable applications for privilege escalation.
122. What is a primary risk of IoT-enabled smart TVs?
🔘 A) Unauthorized tracking and data collection
🔘 B) Improved screen resolution
🔘 C) Increased power efficiency
🔘 D) Faster internet browsing
✅ Answer: A) Unauthorized tracking and data collection
💡 Explanation: Smart TVs collect viewing habits and other data, which can be misused or leaked if not properly secured.
123. What type of cyberattack involves inserting malicious software into IoT firmware?
🔘 A) Firmware Injection Attack
🔘 B) Denial-of-Service Attack
🔘 C) Phishing Attack
🔘 D) Cross-Site Scripting
✅ Answer: A) Firmware Injection Attack
💡 Explanation: Attackers modify IoT firmware to embed malware, create backdoors, or disable security protections.
124. How does IoT security logging help in cyber incident response?
🔘 A) It provides detailed logs for forensic investigation and threat detection
🔘 B) It reduces storage usage
🔘 C) It disables security monitoring
🔘 D) It speeds up internet access
✅ Answer: A) It provides detailed logs for forensic investigation and threat detection
💡 Explanation: Logging records security events and anomalies, helping detect breaches and investigate cyber incidents.
125. Why is IoT endpoint detection and response (EDR) important?
🔘 A) It provides real-time monitoring and automated threat response for IoT devices
🔘 B) It increases IoT power consumption
🔘 C) It disables device encryption
🔘 D) It reduces device speed
✅ Answer: A) It provides real-time monitoring and automated threat response for IoT devices
💡 Explanation: IoT EDR continuously monitors for threats, preventing cyberattacks in real time.
126. What is a common method attackers use to exploit IoT cloud integrations?
🔘 A) API exploitation to gain unauthorized access
🔘 B) Increasing device storage
🔘 C) Reducing device network speed
🔘 D) Encrypting IoT logs
✅ Answer: A) API exploitation to gain unauthorized access
💡 Explanation: Weak API security in cloud-integrated IoT devices can allow attackers to extract data, manipulate device functionality, or gain unauthorized access.
127. What is an IoT honeynet?
🔘 A) A network of honeypots designed to detect and analyze IoT-based cyber threats
🔘 B) A secure VPN for IoT devices
🔘 C) A physical security layer for IoT devices
🔘 D) A method for optimizing IoT network speed
✅ Answer: A) A network of honeypots designed to detect and analyze IoT-based cyber threats
💡 Explanation: IoT honeynets consist of multiple honeypots to lure attackers and collect data on real-world cyberattack tactics.
128. What type of encryption should be avoided in IoT devices due to its vulnerabilities?
🔘 A) DES (Data Encryption Standard)
🔘 B) AES-256
🔘 C) TLS 1.3
🔘 D) ChaCha20
✅ Answer: A) DES (Data Encryption Standard)
💡 Explanation: DES is considered weak and can be easily cracked by modern computing power, making it unsuitable for IoT security.
129. How can IoT manufacturers prevent hardware trojans in their devices?
🔘 A) Implement strict supply chain security and conduct hardware integrity checks
🔘 B) Allow third-party modifications to firmware
🔘 C) Remove encryption to speed up processes
🔘 D) Use a single vendor for all components
✅ Answer: A) Implement strict supply chain security and conduct hardware integrity checks
💡 Explanation: Hardware trojans can be inserted during manufacturing, so ensuring secure supply chains and component verification is crucial.
130. Why is over-the-air (OTA) update security critical for IoT devices?
🔘 A) Attackers can hijack insecure OTA updates to inject malicious firmware
🔘 B) OTA updates increase power consumption
🔘 C) OTA updates reduce IoT device network speed
🔘 D) OTA updates disable encryption
✅ Answer: A) Attackers can hijack insecure OTA updates to inject malicious firmware
💡 Explanation: Unsecured OTA updates can be intercepted by attackers to deliver malware or backdoored firmware to IoT devices.
131. What is the primary goal of an IoT penetration test?
🔘 A) Identifying vulnerabilities and security gaps in IoT devices and networks
🔘 B) Speeding up IoT network traffic
🔘 C) Reducing IoT power consumption
🔘 D) Disabling encryption for faster response times
✅ Answer: A) Identifying vulnerabilities and security gaps in IoT devices and networks
💡 Explanation: Penetration testing simulates attacks on IoT systems to uncover security weaknesses before real attackers do.
132. What is a common risk of voice-controlled IoT devices?
🔘 A) Voice commands can be intercepted or manipulated using adversarial attacks
🔘 B) Voice recognition improves device efficiency
🔘 C) Voice control reduces energy consumption
🔘 D) Voice-based IoT devices are immune to cyberattacks
✅ Answer: A) Voice commands can be intercepted or manipulated using adversarial attacks
💡 Explanation: Attackers can use specially crafted audio signals to manipulate voice-controlled IoT devices, triggering unauthorized actions.
133. What does IoT network behavior analysis focus on?
🔘 A) Detecting unusual device communication patterns that indicate threats
🔘 B) Reducing bandwidth consumption
🔘 C) Increasing device storage
🔘 D) Disabling security monitoring
✅ Answer: A) Detecting unusual device communication patterns that indicate threats
💡 Explanation: Analyzing network behavior helps detect anomalies such as botnet infections, unauthorized access, or compromised devices.
134. What risk does an exposed IoT MQTT broker present?
🔘 A) Attackers can intercept and manipulate IoT messages
🔘 B) It increases device processing speed
🔘 C) It enhances IoT network efficiency
🔘 D) It prevents unauthorized access
✅ Answer: A) Attackers can intercept and manipulate IoT messages
💡 Explanation: MQTT brokers manage IoT device communication, and if not secured properly, attackers can steal or modify IoT data in transit.
135. How does blockchain improve IoT security?
🔘 A) By providing a decentralized and immutable record of device transactions
🔘 B) By increasing IoT device processing speed
🔘 C) By disabling authentication for faster access
🔘 D) By encrypting all IoT network traffic
✅ Answer: A) By providing a decentralized and immutable record of device transactions
💡 Explanation: Blockchain ensures integrity in IoT transactions, preventing data tampering and unauthorized modifications.
136. What is the risk of hardcoding credentials in IoT firmware?
🔘 A) Credentials can be extracted and used by attackers to gain access
🔘 B) It enhances encryption efficiency
🔘 C) It speeds up authentication
🔘 D) It reduces storage requirements
✅ Answer: A) Credentials can be extracted and used by attackers to gain access
💡 Explanation: Hardcoded credentials in firmware make IoT devices vulnerable to attacks since they cannot be easily changed or updated.
137. What security risk is associated with insecure bootloaders in IoT?
🔘 A) Attackers can load malicious firmware, bypassing security protections
🔘 B) It reduces network speed
🔘 C) It increases device battery consumption
🔘 D) It enhances system logging
✅ Answer: A) Attackers can load malicious firmware, bypassing security protections
💡 Explanation: An insecure bootloader allows unauthorized firmware to be installed, leading to potential malware infections.
138. What is the role of secure enclaves in IoT security?
🔘 A) Providing isolated, protected environments for sensitive operations
🔘 B) Increasing IoT device network speed
🔘 C) Reducing power consumption
🔘 D) Disabling authentication
✅ Answer: A) Providing isolated, protected environments for sensitive operations
💡 Explanation: Secure enclaves protect critical computations and encryption keys from unauthorized access and tampering.
139. What is a critical security challenge in IoT device identity management?
🔘 A) Ensuring unique, verifiable identities for every connected device
🔘 B) Reducing device weight
🔘 C) Increasing network speed
🔘 D) Improving device storage
✅ Answer: A) Ensuring unique, verifiable identities for every connected device
💡 Explanation: Proper identity management ensures only authenticated devices can interact with IoT networks, preventing unauthorized access.
140. Why should IoT devices limit data retention?
🔘 A) To reduce the risk of data breaches and regulatory non-compliance
🔘 B) To improve device processing speed
🔘 C) To reduce battery consumption
🔘 D) To increase storage capacity
✅ Answer: A) To reduce the risk of data breaches and regulatory non-compliance
💡 Explanation: Storing only necessary data minimizes the impact of potential breaches and ensures compliance with privacy laws like GDPR and CCPA.
141. What is the main security risk of IoT-enabled home automation systems?
🔘 A) They can be remotely controlled by attackers if improperly secured
🔘 B) They increase home energy consumption
🔘 C) They reduce wireless range
🔘 D) They improve internet speed
✅ Answer: A) They can be remotely controlled by attackers if improperly secured
💡 Explanation: IoT-enabled smart home devices (like locks, lights, and thermostats) can be exploited if weak authentication is used, leading to unauthorized control.
142. How does IoT device sandboxing enhance security?
🔘 A) By isolating application processes to prevent malware spread
🔘 B) By reducing data storage
🔘 C) By increasing device processing speed
🔘 D) By disabling encryption
✅ Answer: A) By isolating application processes to prevent malware spread
💡 Explanation: Sandboxing ensures that IoT applications operate in isolated environments, preventing malware from compromising the entire system.
143. What is a risk of using outdated IoT communication protocols?
🔘 A) Increased exposure to known vulnerabilities and exploits
🔘 B) Improved wireless signal strength
🔘 C) Enhanced encryption security
🔘 D) Reduced device processing time
✅ Answer: A) Increased exposure to known vulnerabilities and exploits
💡 Explanation: Older communication protocols (like SSL and WEP) have known vulnerabilities that attackers can easily exploit to compromise IoT devices.
144. What does an IoT access control policy define?
🔘 A) Which users and devices can access IoT systems and what actions they can perform
🔘 B) How fast IoT devices can communicate
🔘 C) How much power IoT devices consume
🔘 D) The maximum number of IoT devices that can be connected
✅ Answer: A) Which users and devices can access IoT systems and what actions they can perform
💡 Explanation: Access control policies define rules and permissions, ensuring that only authorized entities can access IoT resources.
145. Why is DHCP security important for IoT networks?
🔘 A) To prevent unauthorized devices from obtaining IP addresses
🔘 B) To increase device battery life
🔘 C) To reduce firmware update frequency
🔘 D) To speed up device boot times
✅ Answer: A) To prevent unauthorized devices from obtaining IP addresses
💡 Explanation: Compromised DHCP servers can assign malicious IP configurations to IoT devices, leading to Man-in-the-Middle (MitM) attacks.
146. What is a primary concern with IoT integration in healthcare environments?
🔘 A) Patient data security and unauthorized access to medical devices
🔘 B) Increased energy consumption
🔘 C) Limited device connectivity
🔘 D) Reduced data storage requirements
✅ Answer: A) Patient data security and unauthorized access to medical devices
💡 Explanation: IoT medical devices (like pacemakers and insulin pumps) must be secured to prevent life-threatening cyberattacks and data leaks.
147. What is an IoT Secure Element (SE)?
🔘 A) A hardware-based security module for storing sensitive data securely
🔘 B) A method to disable device authentication
🔘 C) A wireless communication protocol
🔘 D) A type of cloud storage
✅ Answer: A) A hardware-based security module for storing sensitive data securely
💡 Explanation: Secure Elements (SE) provide tamper-resistant storage for sensitive data such as encryption keys and authentication credentials.
148. What security risk does Bluetooth Low Energy (BLE) pose in IoT?
🔘 A) Unauthorized data interception through Bluetooth sniffing attacks
🔘 B) Reduced battery life
🔘 C) Increased wireless interference
🔘 D) Decreased encryption complexity
✅ Answer: A) Unauthorized data interception through Bluetooth sniffing attacks
💡 Explanation: BLE connections can be intercepted by attackers if proper encryption and pairing security measures are not enforced.
149. What role does Zero Trust Architecture (ZTA) play in IoT security?
🔘 A) Enforces continuous verification of all devices and users, even within the network
🔘 B) Reduces network encryption
🔘 C) Increases IoT processing speed
🔘 D) Disables firewalls to improve performance
✅ Answer: A) Enforces continuous verification of all devices and users, even within the network
💡 Explanation: Zero Trust Architecture ensures that no device or user is automatically trusted, reducing the risk of insider threats and lateral movement in IoT networks.
150. Why should IoT devices use whitelisting instead of blacklisting?
🔘 A) Whitelisting allows only approved applications and connections, reducing attack surfaces
🔘 B) It prevents software updates
🔘 C) It increases power consumption
🔘 D) It allows attackers to bypass encryption
✅ Answer: A) Whitelisting allows only approved applications and connections, reducing attack surfaces
💡 Explanation: Whitelisting ensures that only trusted applications, devices, and network traffic are allowed, blocking unauthorized connections by default.
151. What is the risk of using an IoT device with an open serial/debug interface (e.g., UART, JTAG)?
🔘 A) Attackers can directly manipulate device firmware and gain root access
🔘 B) Increased device energy consumption
🔘 C) Improved internet speed
🔘 D) Reduced need for encryption
✅ Answer: A) Attackers can directly manipulate device firmware and gain root access
💡 Explanation: Unprotected debug interfaces allow attackers to modify firmware, extract sensitive data, or bypass authentication controls.
152. What is an effective mitigation strategy for IoT supply chain attacks?
🔘 A) Conducting regular security audits of manufacturers and suppliers
🔘 B) Disabling encryption to reduce processing overhead
🔘 C) Using only proprietary hardware with no security reviews
🔘 D) Allowing all devices unrestricted network access
✅ Answer: A) Conducting regular security audits of manufacturers and suppliers
💡 Explanation: Supply chain security ensures that components and firmware are free from backdoors, malware, and unauthorized modifications.
153. How does Transport Layer Security (TLS) protect IoT communications?
🔘 A) Encrypting data in transit to prevent interception and tampering
🔘 B) Increasing IoT device speed
🔘 C) Disabling authentication for faster connections
🔘 D) Reducing power consumption
✅ Answer: A) Encrypting data in transit to prevent interception and tampering
💡 Explanation: TLS encrypts communication channels between IoT devices, servers, and cloud services, preventing eavesdropping and MitM attacks.
154. What security measure can prevent botnets from infecting IoT devices?
🔘 A) Enforcing strong password policies and disabling default credentials
🔘 B) Reducing encryption levels
🔘 C) Disabling logging
🔘 D) Allowing all incoming network traffic
✅ Answer: A) Enforcing strong password policies and disabling default credentials
💡 Explanation: Weak credentials and unchanged default passwords are the primary methods attackers use to infect IoT devices with botnets.
155. Why is physical device tampering a significant security concern in IoT?
🔘 A) Attackers can extract firmware, credentials, or manipulate device functionality
🔘 B) It slows down data transmission
🔘 C) It increases device temperature
🔘 D) It reduces battery life
✅ Answer: A) Attackers can extract firmware, credentials, or manipulate device functionality
💡 Explanation: If an IoT device is physically accessed, attackers can extract sensitive data or install malicious firmware, leading to security breaches.
156. How does a side-channel attack compromise IoT security?
🔘 A) By analyzing physical properties like power consumption and electromagnetic emissions
🔘 B) By using brute force to crack passwords
🔘 C) By modifying firewall configurations
🔘 D) By blocking software updates
✅ Answer: A) By analyzing physical properties like power consumption and electromagnetic emissions
💡 Explanation: Side-channel attacks extract sensitive information by monitoring power usage, electromagnetic leaks, or timing variations during device operations.
157. What is a key risk of IoT smart grid systems?
🔘 A) Cyber-physical attacks can manipulate power distribution and grid stability
🔘 B) They reduce overall power efficiency
🔘 C) They improve encryption performance
🔘 D) They increase latency in industrial operations
✅ Answer: A) Cyber-physical attacks can manipulate power distribution and grid stability
💡 Explanation: Hackers targeting smart grids can disrupt power distribution, cause outages, and even manipulate billing data.
158. Why should IoT devices use unique cryptographic keys instead of shared ones?
🔘 A) To prevent attackers from compromising multiple devices if a single key is leaked
🔘 B) To increase device speed
🔘 C) To improve battery life
🔘 D) To make debugging easier
✅ Answer: A) To prevent attackers from compromising multiple devices if a single key is leaked
💡 Explanation: Using the same encryption key across multiple devices means if one device is breached, all others are vulnerable.
159. What is an effective mitigation for IoT denial-of-service (DoS) attacks?
🔘 A) Implementing rate limiting and anomaly detection mechanisms
🔘 B) Reducing the number of connected devices
🔘 C) Removing device firewalls
🔘 D) Disabling authentication to speed up processing
✅ Answer: A) Implementing rate limiting and anomaly detection mechanisms
💡 Explanation: Rate limiting and anomaly detection prevent excessive requests from overwhelming IoT devices, reducing the impact of DoS attacks.
160. What is a primary risk of IoT device exposure on public networks?
🔘 A) Attackers can remotely access and control the device
🔘 B) The device consumes more bandwidth
🔘 C) The device automatically updates its firmware
🔘 D) The device’s battery drains faster
✅ Answer: A) Attackers can remotely access and control the device
💡 Explanation: Exposing IoT devices on public networks without proper authentication allows attackers to exploit them for malicious purposes.
161. How can organizations detect compromised IoT devices in their networks?
🔘 A) By monitoring network traffic for unusual activity
🔘 B) By reducing encryption levels
🔘 C) By disabling logging features
🔘 D) By allowing all devices to communicate freely
✅ Answer: A) By monitoring network traffic for unusual activity
💡 Explanation: Anomalies such as increased traffic, communication with unknown IPs, or unexpected data transmissions indicate potential IoT compromise.
162. What is the main security risk associated with IoT remote access?
🔘 A) Unauthorized attackers can gain control over devices if access is not secured
🔘 B) It reduces device speed
🔘 C) It increases power consumption
🔘 D) It prevents DoS attacks
✅ Answer: A) Unauthorized attackers can gain control over devices if access is not secured
💡 Explanation: Weak remote access security (e.g., default passwords, no MFA) allows hackers to take over IoT devices remotely.
163. What is a common weakness in IoT cloud storage security?
🔘 A) Inadequate encryption of stored data
🔘 B) Increased data storage capacity
🔘 C) Faster data retrieval
🔘 D) Reduced power consumption
✅ Answer: A) Inadequate encryption of stored data
💡 Explanation: If IoT cloud storage is not encrypted properly, attackers who gain access to it can steal sensitive data.
164. Why should IoT devices avoid excessive data collection?
🔘 A) To reduce privacy risks and limit the impact of data breaches
🔘 B) To improve wireless network speed
🔘 C) To enhance device battery life
🔘 D) To reduce firmware update frequency
✅ Answer: A) To reduce privacy risks and limit the impact of data breaches
💡 Explanation: Collecting only necessary data minimizes security and privacy risks if a breach occurs.
165. What is a security challenge of IoT biometric authentication?
🔘 A) Biometric data, once compromised, cannot be changed
🔘 B) Biometric authentication slows down IoT operations
🔘 C) Biometrics improve encryption complexity
🔘 D) Biometrics prevent software updates
✅ Answer: A) Biometric data, once compromised, cannot be changed
💡 Explanation: Unlike passwords, biometric data cannot be reset, making compromised biometric information a permanent security risk.
166. What is an effective way to prevent rogue IoT devices from connecting to a network?
🔘 A) Implementing MAC address filtering and access control lists (ACLs)
🔘 B) Increasing wireless transmission power
🔘 C) Reducing encryption strength
🔘 D) Allowing open network access
✅ Answer: A) Implementing MAC address filtering and access control lists (ACLs)
💡 Explanation: MAC address filtering and ACLs ensure only authorized IoT devices can connect to the network, blocking rogue devices.
167. Why is firmware rollback protection important for IoT security?
🔘 A) It prevents attackers from downgrading devices to vulnerable firmware versions
🔘 B) It increases IoT device speed
🔘 C) It reduces encryption processing time
🔘 D) It allows firmware updates to be disabled
✅ Answer: A) It prevents attackers from downgrading devices to vulnerable firmware versions
💡 Explanation: Attackers may try to install an older, vulnerable version of firmware, so rollback protection ensures only newer, secure versions are used.
168. What type of malware is commonly used to infect IoT devices and create botnets?
🔘 A) Mirai-like botnet malware
🔘 B) Ransomware
🔘 C) Keyloggers
🔘 D) Spyware
✅ Answer: A) Mirai-like botnet malware
💡 Explanation: Mirai and similar botnet malware exploit weak credentials and vulnerabilities in IoT devices to launch large-scale cyberattacks.
169. Why is mutual authentication important in IoT security?
🔘 A) It ensures both the IoT device and the server verify each other’s identity before communication
🔘 B) It increases battery consumption
🔘 C) It reduces firmware update speed
🔘 D) It prevents device overheating
✅ Answer: A) It ensures both the IoT device and the server verify each other’s identity before communication
💡 Explanation: Mutual authentication prevents attackers from impersonating either the IoT device or the server, reducing MITM attacks.
170. What is the risk of using static passwords in IoT devices?
🔘 A) They are easy for attackers to guess or reuse from breached databases
🔘 B) They improve device processing speed
🔘 C) They reduce network congestion
🔘 D) They increase battery efficiency
✅ Answer: A) They are easy for attackers to guess or reuse from breached databases
💡 Explanation: Static passwords are a major security weakness in IoT devices since they can be guessed, reused, or stolen in credential leaks.
171. What is a security risk of IoT edge devices?
🔘 A) They can be compromised and manipulated to process malicious data locally
🔘 B) They consume less power
🔘 C) They enhance cloud processing efficiency
🔘 D) They prevent data breaches
✅ Answer: A) They can be compromised and manipulated to process malicious data locally
💡 Explanation: IoT edge devices process data locally, making them a target for attacks that manipulate data before it reaches the cloud.
172. Why should IoT devices avoid using deprecated cryptographic algorithms?
🔘 A) They are vulnerable to modern brute force and cryptanalysis attacks
🔘 B) They reduce power consumption
🔘 C) They improve network bandwidth
🔘 D) They speed up encryption processing
✅ Answer: A) They are vulnerable to modern brute force and cryptanalysis attacks
💡 Explanation: Outdated encryption algorithms (e.g., SHA-1, MD5) can be easily cracked, making IoT devices susceptible to data breaches.
173. What security benefit does containerization provide for IoT applications?
🔘 A) It isolates processes, preventing malware from affecting the entire system
🔘 B) It increases IoT device power consumption
🔘 C) It disables encryption
🔘 D) It enhances the physical security of devices
✅ Answer: A) It isolates processes, preventing malware from affecting the entire system
💡 Explanation: Containerization ensures that malicious software or vulnerabilities in one process do not spread to the entire IoT device.
174. What type of attack involves intercepting and modifying IoT device communications?
🔘 A) Man-in-the-Middle (MitM) attack
🔘 B) Phishing attack
🔘 C) SQL Injection attack
🔘 D) Dictionary attack
✅ Answer: A) Man-in-the-Middle (MitM) attack
💡 Explanation: MitM attacks occur when an attacker intercepts and alters communication between an IoT device and its server, leading to data manipulation or eavesdropping.
175. What is an example of an insecure IoT firmware update mechanism?
🔘 A) Unauthenticated firmware updates downloaded over HTTP
🔘 B) Digitally signed and encrypted firmware updates
🔘 C) Using a secure boot mechanism
🔘 D) Requiring two-factor authentication for updates
✅ Answer: A) Unauthenticated firmware updates downloaded over HTTP
💡 Explanation: Firmware updates should always be authenticated, encrypted, and delivered over secure channels (e.g., HTTPS) to prevent tampering.
176. What is a major security risk of using IoT devices in industrial environments?
🔘 A) Attackers can disrupt operations by compromising industrial control systems (ICS)
🔘 B) IoT devices increase data processing speed
🔘 C) IoT devices improve employee productivity
🔘 D) IoT devices consume more power than traditional industrial devices
✅ Answer: A) Attackers can disrupt operations by compromising industrial control systems (ICS)
💡 Explanation: If attackers gain control of IoT devices in industrial environments, they can manipulate operations, cause equipment failure, or disrupt critical infrastructure.
177. What is an IoT rogue device attack?
🔘 A) When an attacker introduces an unauthorized device into an IoT network
🔘 B) When an IoT device overheats
🔘 C) When IoT firmware updates fail
🔘 D) When IoT devices operate on low battery
✅ Answer: A) When an attacker introduces an unauthorized device into an IoT network
💡 Explanation: A rogue IoT device can be used to collect data, launch attacks, or act as a pivot for lateral movement within the network.
178. How does federated identity management improve IoT security?
🔘 A) It allows secure authentication across multiple IoT systems and services
🔘 B) It reduces encryption complexity
🔘 C) It prevents data transmission
🔘 D) It disables firewall protections
✅ Answer: A) It allows secure authentication across multiple IoT systems and services
💡 Explanation: Federated identity management enables users and devices to authenticate across multiple networks securely, reducing authentication overhead and improving security.
179. What is the risk of long-lived IoT session tokens?
🔘 A) They can be stolen and reused by attackers to maintain unauthorized access
🔘 B) They improve network performance
🔘 C) They reduce encryption overhead
🔘 D) They prevent data leaks
✅ Answer: A) They can be stolen and reused by attackers to maintain unauthorized access
💡 Explanation: Short-lived session tokens with automatic expiration reduce the risk of attackers hijacking and reusing them indefinitely.
180. What is an effective way to prevent unauthorized IoT device enrollment?
🔘 A) Implementing mutual authentication before device registration
🔘 B) Allowing open network access for all IoT devices
🔘 C) Disabling encryption during enrollment
🔘 D) Using default administrator credentials
✅ Answer: A) Implementing mutual authentication before device registration
💡 Explanation: Mutual authentication ensures that only legitimate devices can be enrolled in the IoT network, preventing unauthorized access.
181. What is a common IoT vulnerability caused by improper certificate management?
🔘 A) Expired or revoked certificates can lead to authentication failures
🔘 B) Increased encryption speed
🔘 C) Reduced power consumption
🔘 D) Faster data transmission
✅ Answer: A) Expired or revoked certificates can lead to authentication failures
💡 Explanation: IoT devices using expired or revoked certificates may fail authentication, leaving them vulnerable to attacks or denial of service.
182. What is a risk of not implementing proper logging on IoT devices?
🔘 A) Security incidents may go undetected, making forensic investigations difficult
🔘 B) The device processes data faster
🔘 C) The device consumes less energy
🔘 D) Encryption becomes stronger
✅ Answer: A) Security incidents may go undetected, making forensic investigations difficult
💡 Explanation: Without proper logging, security breaches, unauthorized access, and malware infections may not be detected in time.
183. How does IoT network segmentation enhance security?
🔘 A) By isolating IoT devices from critical systems to prevent lateral movement in an attack
🔘 B) By reducing data storage
🔘 C) By improving battery efficiency
🔘 D) By speeding up Wi-Fi connections
✅ Answer: A) By isolating IoT devices from critical systems to prevent lateral movement in an attack
💡 Explanation: Network segmentation ensures that even if an IoT device is compromised, attackers cannot easily access critical infrastructure.
184. What is a key reason for enforcing strong authentication on IoT APIs?
🔘 A) To prevent unauthorized access and data manipulation
🔘 B) To increase device performance
🔘 C) To reduce encryption overhead
🔘 D) To improve IoT battery life
✅ Answer: A) To prevent unauthorized access and data manipulation
💡 Explanation: APIs are often targeted by attackers, so strong authentication ensures that only authorized applications and users can interact with IoT services.
185. What is an effective way to secure IoT firmware updates?
🔘 A) Using digitally signed and encrypted updates delivered over secure channels
🔘 B) Disabling firmware updates to prevent attacks
🔘 C) Downloading updates from third-party sources
🔘 D) Allowing anonymous access to update servers
✅ Answer: A) Using digitally signed and encrypted updates delivered over secure channels
💡 Explanation: Digitally signed updates ensure integrity, while encryption prevents attackers from modifying or injecting malicious firmware.
186. What is the main risk of hardcoded backdoor accounts in IoT devices?
🔘 A) Attackers can exploit them for unauthorized access
🔘 B) They increase device encryption strength
🔘 C) They improve network speed
🔘 D) They reduce power consumption
✅ Answer: A) Attackers can exploit them for unauthorized access
💡 Explanation: Hardcoded backdoor accounts provide a way for attackers to bypass authentication and gain control over IoT devices.
187. Why is monitoring DNS traffic important for IoT security?
🔘 A) It helps detect malicious communications between compromised IoT devices and attacker-controlled servers
🔘 B) It improves IoT device battery life
🔘 C) It reduces the need for encryption
🔘 D) It speeds up firmware updates
✅ Answer: A) It helps detect malicious communications between compromised IoT devices and attacker-controlled servers
💡 Explanation: Monitoring DNS requests can reveal if an IoT device is connecting to suspicious domains, indicating a possible malware infection.
188. How does default port usage impact IoT security?
🔘 A) Attackers often scan for IoT devices using default ports, increasing the risk of unauthorized access
🔘 B) It makes IoT networks more efficient
🔘 C) It enhances encryption performance
🔘 D) It reduces power consumption
✅ Answer: A) Attackers often scan for IoT devices using default ports, increasing the risk of unauthorized access
💡 Explanation: Using default ports makes IoT devices easier to discover and attack, so changing ports or using firewall rules can improve security.
189. What security risk arises from IoT devices using weak or no authentication on local network interfaces?
🔘 A) Attackers can gain direct access to the device’s functions and settings
🔘 B) It reduces IoT power consumption
🔘 C) It speeds up wireless communication
🔘 D) It improves data encryption
✅ Answer: A) Attackers can gain direct access to the device’s functions and settings
💡 Explanation: Without strong authentication, an attacker on the local network can directly manipulate the IoT device, change configurations, or install malware.
190. Why should IoT devices support regular security patches?
🔘 A) To fix vulnerabilities that attackers might exploit
🔘 B) To reduce network latency
🔘 C) To prevent devices from overheating
🔘 D) To improve device power efficiency
✅ Answer: A) To fix vulnerabilities that attackers might exploit
💡 Explanation: Regular security patches are essential to close vulnerabilities that could be exploited by attackers.
191. What is a potential risk of IoT devices using outdated SSL/TLS versions?
🔘 A) Attackers can decrypt communications using known vulnerabilities
🔘 B) It increases the device’s processing speed
🔘 C) It enhances IoT data storage efficiency
🔘 D) It reduces bandwidth consumption
✅ Answer: A) Attackers can decrypt communications using known vulnerabilities
💡 Explanation: Older versions of SSL/TLS have vulnerabilities (e.g., TLS 1.0, SSLv3) that allow attackers to break encryption and intercept data.
192. How does disabling unnecessary services on IoT devices improve security?
🔘 A) It reduces the attack surface by limiting potential entry points for attackers
🔘 B) It speeds up IoT data transmission
🔘 C) It increases device battery efficiency
🔘 D) It allows for faster processing
✅ Answer: A) It reduces the attack surface by limiting potential entry points for attackers
💡 Explanation: Disabling services that are not needed minimizes the number of ways an attacker can exploit a device.
193. What is a primary reason for enforcing strong password policies on IoT devices?
🔘 A) To prevent brute force attacks and unauthorized access
🔘 B) To reduce energy consumption
🔘 C) To increase device speed
🔘 D) To optimize firmware update processes
✅ Answer: A) To prevent brute force attacks and unauthorized access
💡 Explanation: Weak passwords can be easily guessed using brute force attacks, allowing attackers to take control of IoT devices.
194. How can IoT honeypots help improve cybersecurity?
🔘 A) They attract attackers to study their tactics and improve defenses
🔘 B) They increase device performance
🔘 C) They speed up IoT communication
🔘 D) They reduce device overheating
✅ Answer: A) They attract attackers to study their tactics and improve defenses
💡 Explanation: IoT honeypots act as decoys, collecting intelligence on cyber threats and attack methods used against IoT networks.
195. Why is network segmentation critical for securing IoT devices?
🔘 A) It prevents compromised IoT devices from spreading attacks to critical systems
🔘 B) It reduces data encryption overhead
🔘 C) It increases IoT processing speed
🔘 D) It prevents firmware updates
✅ Answer: A) It prevents compromised IoT devices from spreading attacks to critical systems
💡 Explanation: Proper segmentation ensures that an attacker who compromises one IoT device cannot easily move to more sensitive systems.
196. What is the primary risk of using public cloud storage for IoT data without encryption?
🔘 A) Data can be intercepted and accessed by unauthorized users
🔘 B) It speeds up data retrieval
🔘 C) It reduces the cost of IoT operations
🔘 D) It improves device battery life
✅ Answer: A) Data can be intercepted and accessed by unauthorized users
💡 Explanation: Without encryption, sensitive IoT data stored in public cloud services can be accessed if an attacker gains access to the cloud environment.
197. What is a risk of allowing IoT devices to communicate using unsecured Wi-Fi networks?
🔘 A) Attackers can intercept and manipulate device communications
🔘 B) It improves Wi-Fi signal strength
🔘 C) It increases device battery life
🔘 D) It speeds up firmware updates
✅ Answer: A) Attackers can intercept and manipulate device communications
💡 Explanation: Unsecured Wi-Fi networks expose IoT devices to eavesdropping, man-in-the-middle attacks, and data manipulation.
198. Why is it important to use access logs in IoT systems?
🔘 A) They help detect unauthorized access attempts and security breaches
🔘 B) They improve encryption efficiency
🔘 C) They reduce device power consumption
🔘 D) They increase IoT device lifespan
✅ Answer: A) They help detect unauthorized access attempts and security breaches
💡 Explanation: Logging access records helps organizations track user activity and respond quickly to potential security incidents.
199. What is a critical risk of IoT devices relying on weak identity management?
🔘 A) Unauthorized users may gain control over IoT devices
🔘 B) It speeds up device authentication
🔘 C) It improves device connectivity
🔘 D) It reduces energy consumption
✅ Answer: A) Unauthorized users may gain control over IoT devices
💡 Explanation: Without proper identity management, attackers can impersonate legitimate users and take control of IoT devices.
200. What is the role of AI in IoT threat detection?
🔘 A) AI can analyze patterns and detect anomalies that indicate security threats
🔘 B) AI disables IoT authentication features
🔘 C) AI reduces IoT encryption complexity
🔘 D) AI increases device power consumption
✅ Answer: A) AI can analyze patterns and detect anomalies that indicate security threats
💡 Explanation: AI-driven security systems can detect unusual network activity and identify potential threats in IoT environments faster than traditional security tools.