Smart Home Security - Securing Smart Locks, Cameras, and Assistants

1. Which of the following is a common attack vector against smart locks?

🔘 A) SQL Injection
🔘 B) Man-in-the-Middle (MITM) Attacks
🔘 C) Buffer Overflow
🔘 D) Remote Desktop Protocol (RDP) Exploit

✅ Correct Answer: B) Man-in-the-Middle (MITM) Attacks
📝 Explanation: Smart locks often rely on Bluetooth or Wi-Fi, making them vulnerable to MITM attacks where an attacker intercepts and alters communication between the lock and the controlling device.

2. What is the primary security concern when using a cloud-connected smart camera?

🔘 A) Lack of local storage
🔘 B) Unauthorized remote access
🔘 C) High power consumption
🔘 D) Limited field of view

✅ Correct Answer: B) Unauthorized remote access
📝 Explanation: Cloud-connected cameras are often targeted by attackers trying to access live feeds or stored footage, especially if the device has weak credentials or outdated firmware.

3. What is the safest method for securing a smart home assistant like Amazon Echo or Google Home?

🔘 A) Disabling voice commands
🔘 B) Changing the default wake word
🔘 C) Using strong authentication for linked accounts
🔘 D) Placing the device in a locked room

✅ Correct Answer: C) Using strong authentication for linked accounts
📝 Explanation: The biggest risk is unauthorized access to accounts linked with the assistant. Enabling two-factor authentication (2FA) and using strong passwords helps mitigate this risk.

4. What is the best way to prevent attackers from exploiting smart cameras?

🔘 A) Keeping them turned off at all times
🔘 B) Using end-to-end encrypted camera streams
🔘 C) Placing tape over the camera lens
🔘 D) Blocking all outgoing internet connections

✅ Correct Answer: B) Using end-to-end encrypted camera streams
📝 Explanation: Smart cameras should use strong encryption (AES-256, TLS 1.2/1.3) to prevent attackers from eavesdropping on footage.

5. What security risk does enabling remote access for smart locks introduce?

🔘 A) Increased power consumption
🔘 B) Unauthorized entry if credentials are compromised
🔘 C) Physical wear and tear on the lock
🔘 D) More Wi-Fi interference

✅ Correct Answer: B) Unauthorized entry if credentials are compromised
📝 Explanation: Remote access allows attackers to brute-force passwords or exploit API vulnerabilities to gain unauthorized control of smart locks.

6. Why is disabling Universal Plug and Play (UPnP) recommended for smart home devices?

🔘 A) It increases Wi-Fi speed
🔘 B) It prevents automatic port forwarding, reducing attack exposure
🔘 C) It improves battery life of devices
🔘 D) It reduces the cost of the internet connection

✅ Correct Answer: B) It prevents automatic port forwarding, reducing attack exposure
📝 Explanation: UPnP automatically opens ports on routers, making smart home devices more vulnerable to attacks like botnets and remote exploits.

7. Which of the following is NOT a recommended security practice for smart home devices?

🔘 A) Using strong, unique passwords
🔘 B) Keeping firmware updated
🔘 C) Connecting devices to public Wi-Fi networks
🔘 D) Disabling unnecessary features

✅ Correct Answer: C) Connecting devices to public Wi-Fi networks
📝 Explanation: Public Wi-Fi is insecure and susceptible to eavesdropping, MITM attacks, and credential theft.

8. What kind of encryption is commonly used to secure smart home communication?

🔘 A) SHA-256
🔘 B) AES-256
🔘 C) MD5
🔘 D) XOR encryption

✅ Correct Answer: B) AES-256
📝 Explanation: AES-256 is a strong encryption standard used for securing smart home device communication. MD5 and XOR are weak and not recommended.

9. How can an attacker exploit a smart assistant using voice commands?

🔘 A) By whispering to the assistant
🔘 B) By using ultrasonic voice commands (DolphinAttack)
🔘 C) By increasing the assistant’s volume
🔘 D) By reducing microphone sensitivity

✅ Correct Answer: B) By using ultrasonic voice commands (DolphinAttack)
📝 Explanation: The DolphinAttack uses inaudible ultrasonic commands to control smart assistants without user awareness.

10. What is the purpose of MAC address filtering for smart home security?

🔘 A) To improve device performance
🔘 B) To allow only specific devices to connect to the network
🔘 C) To reduce internet speed
🔘 D) To automatically update devices

✅ Correct Answer: B) To allow only specific devices to connect to the network
📝 Explanation: MAC address filtering adds an extra layer of security by restricting unauthorized devices from accessing the network.

11. What is a common way smart home devices are added to botnets like Mirai?

🔘 A) By exploiting default passwords
🔘 B) By overheating the device
🔘 C) By filling storage space
🔘 D) By using Bluetooth

✅ Correct Answer: A) By exploiting default passwords
📝 Explanation: Botnets like Mirai scan for IoT devices with default credentials and take control of them for DDoS attacks.

12. What security risk does enabling “guest access” on smart devices pose?

🔘 A) It slows down the internet
🔘 B) It allows unauthorized users to control devices
🔘 C) It increases battery drain
🔘 D) It prevents device updates

✅ Correct Answer: B) It allows unauthorized users to control devices
📝 Explanation: Guest access often lacks strong authentication, making devices easier to exploit.

13. How can attackers exploit weak API security in smart home devices?

🔘 A) By sending malformed JSON requests
🔘 B) By brute-forcing usernames
🔘 C) By jamming wireless signals
🔘 D) By changing IP addresses

✅ Correct Answer: A) By sending malformed JSON requests
📝 Explanation: Weak API security can allow attackers to send malformed requests to trigger vulnerabilities like command injection or privilege escalation.

14. What is a common security flaw in older smart lock models?

🔘 A) Lack of physical key backup
🔘 B) Weak encryption in Bluetooth communication
🔘 C) Excessive battery consumption
🔘 D) Inability to reset access codes

✅ Correct Answer: B) Weak encryption in Bluetooth communication
📝 Explanation: Older smart locks often use outdated Bluetooth encryption (e.g., Bluetooth Low Energy v4.0), making them vulnerable to replay and MITM attacks.

15. Why should you disable unused features on smart home devices?

🔘 A) To improve Wi-Fi signal strength
🔘 B) To reduce battery drain
🔘 C) To minimize attack surfaces
🔘 D) To improve device aesthetics

✅ Correct Answer: C) To minimize attack surfaces
📝 Explanation: Disabling unused features (e.g., remote access, unnecessary APIs) reduces potential entry points for attackers.

16. What is the role of a firewall in smart home security?

🔘 A) It blocks all incoming and outgoing traffic
🔘 B) It allows only internet access to smart devices
🔘 C) It monitors and controls network traffic to prevent malicious connections
🔘 D) It physically secures smart devices

✅ Correct Answer: C) It monitors and controls network traffic to prevent malicious connections
📝 Explanation: Firewalls help filter malicious traffic, block unauthorized access, and detect suspicious activity.

17. Which smart home protocol is considered more secure due to its mesh network encryption?

🔘 A) Zigbee
🔘 B) Wi-Fi
🔘 C) Bluetooth
🔘 D) NFC

✅ Correct Answer: A) Zigbee
📝 Explanation: Zigbee encrypts data within its mesh network (AES-128), making it more secure than traditional Wi-Fi or Bluetooth connections.

18. Why is it risky to use default or simple passwords for smart home devices?

🔘 A) They are harder to remember
🔘 B) They allow easy brute-force or credential stuffing attacks
🔘 C) They make the device incompatible with 2FA
🔘 D) They slow down device performance

✅ Correct Answer: B) They allow easy brute-force or credential stuffing attacks
📝 Explanation: Attackers scan for devices with weak or default passwords and use brute-force or leaked credential databases to gain unauthorized access.

19. How can hackers exploit a smart home’s voice assistant through audio-based attacks?

🔘 A) By using radio frequency interference
🔘 B) By transmitting ultrasonic voice commands (DolphinAttack)
🔘 C) By lowering the device’s volume
🔘 D) By forcing a reboot

✅ Correct Answer: B) By transmitting ultrasonic voice commands (DolphinAttack)
📝 Explanation: Attackers can use high-frequency commands (inaudible to humans) to control voice assistants without the owner’s knowledge.

20. What is an effective way to prevent Wi-Fi jamming attacks on smart devices?

🔘 A) Use 2.4 GHz Wi-Fi only
🔘 B) Enable MAC address filtering
🔘 C) Use smart home devices with Ethernet backup
🔘 D) Lower the Wi-Fi signal strength

✅ Correct Answer: C) Use smart home devices with Ethernet backup
📝 Explanation: Wi-Fi jamming disrupts wireless connectivity, but Ethernet-connected devices remain operational.

21. Which encryption protocol should be used for securing Wi-Fi networks in a smart home?

🔘 A) WEP
🔘 B) WPA
🔘 C) WPA2
🔘 D) WPA3

✅ Correct Answer: D) WPA3
📝 Explanation: WPA3 provides stronger encryption, protection against brute-force attacks, and forward secrecy, making it the most secure option.

22. How can an attacker gain unauthorized access to a smart home system?

🔘 A) By installing malware on a linked smartphone
🔘 B) By physically tampering with the router
🔘 C) By exploiting unpatched firmware vulnerabilities
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Attackers use multiple attack vectors, including malware, router hacking, and exploiting firmware vulnerabilities to infiltrate smart home systems.

23. What security measure can prevent attackers from remotely controlling smart home devices?

🔘 A) VPN for external access
🔘 B) Disabling cloud storage
🔘 C) Using a wired internet connection
🔘 D) Placing devices in a locked room

✅ Correct Answer: A) VPN for external access
📝 Explanation: Using a VPN encrypts remote connections and prevents unauthorized access to smart home devices.

24. Why is disabling remote access for smart locks a good security practice?

🔘 A) Prevents attackers from brute-forcing login credentials
🔘 B) Improves battery life
🔘 C) Reduces key duplication risks
🔘 D) Improves response time

✅ Correct Answer: A) Prevents attackers from brute-forcing login credentials
📝 Explanation: Remote access can allow attackers to brute-force credentials or exploit security flaws in APIs.

25. How can attackers bypass smart lock security?

🔘 A) Using Bluetooth spoofing attacks
🔘 B) Exploiting default or weak PINs
🔘 C) Jamming the lock’s communication
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Bluetooth spoofing, PIN brute-forcing, and signal jamming are common methods used to exploit smart locks.

26. What is an effective way to detect unauthorized access attempts on smart home devices?

🔘 A) Monitoring router logs
🔘 B) Using intrusion detection systems (IDS)
🔘 C) Enabling multi-factor authentication
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Network logs, IDS, and multi-factor authentication (MFA) are crucial for identifying and preventing unauthorized access attempts.

27. How can voice assistants be used for data exfiltration?

🔘 A) By sending sensitive data via voice commands
🔘 B) By using smart assistant skills that send data to attackers
🔘 C) By recording conversations and transmitting them
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Attackers can leverage smart assistants to record conversations, use malicious skills, or execute unauthorized commands to exfiltrate data.

28. What type of smart home attack involves tricking devices into connecting to a rogue Wi-Fi network?

🔘 A) Evil Twin Attack
🔘 B) MITM Attack
🔘 C) SSID Spoofing
🔘 D) DNS Hijacking

✅ Correct Answer: A) Evil Twin Attack
📝 Explanation: Evil Twin Attacks create a fake Wi-Fi network that mimics the real one, tricking devices into connecting and exposing data.

29. What security risk does a compromised smart thermostat pose?

🔘 A) It can allow attackers to increase heating bills
🔘 B) It can reveal when homeowners are away
🔘 C) It can be used to overload the power grid
🔘 D) It can delete the home’s Wi-Fi password

✅ Correct Answer: B) It can reveal when homeowners are away
📝 Explanation: A hacked smart thermostat can expose activity patterns, helping burglars know when a house is empty.

30. Why should smart home devices be placed on a separate VLAN (Virtual LAN)?

🔘 A) To prioritize their network traffic
🔘 B) To isolate them from critical devices like PCs
🔘 C) To reduce power consumption
🔘 D) To make them faster

✅ Correct Answer: B) To isolate them from critical devices like PCs
📝 Explanation: VLAN segmentation ensures that a compromised smart device won’t provide direct access to personal or business devices on the same network.

31. What is a common security issue in smart doorbells?

🔘 A) They do not record video at night
🔘 B) They store footage in an unencrypted format
🔘 C) They only work with 5 GHz Wi-Fi
🔘 D) They require daily password resets

✅ Correct Answer: B) They store footage in an unencrypted format
📝 Explanation: Many smart doorbells store footage in plaintext or upload it insecurely, making it susceptible to data leaks and unauthorized access.

32. Why is using biometric authentication (fingerprint, face recognition) on smart locks considered a security risk?

🔘 A) It can be bypassed using 3D-printed fingerprints or facial spoofing
🔘 B) It slows down authentication
🔘 C) It requires frequent reconfiguration
🔘 D) It prevents firmware updates

✅ Correct Answer: A) It can be bypassed using 3D-printed fingerprints or facial spoofing
📝 Explanation: Some biometric systems can be tricked using synthetic fingerprints, high-resolution photos, or 3D models of faces.

33. What is a primary risk of connecting smart home devices to third-party voice assistants?

🔘 A) Increased device latency
🔘 B) Exposure to indirect voice command vulnerabilities
🔘 C) Increased energy consumption
🔘 D) Risk of device overheating

✅ Correct Answer: B) Exposure to indirect voice command vulnerabilities
📝 Explanation: Attackers can exploit skills or integrations in third-party voice assistants to issue unauthorized commands or access sensitive data.

34. What is a potential security risk of using a smart home hub to manage multiple devices?

🔘 A) Increased network congestion
🔘 B) Single point of failure if compromised
🔘 C) Requires constant power
🔘 D) Difficult setup process

✅ Correct Answer: B) Single point of failure if compromised
📝 Explanation: If a smart hub is hacked, the attacker may gain control over all connected devices, creating a centralized security risk.

35. Why should you limit smart home device permissions in mobile apps?

🔘 A) To increase device speed
🔘 B) To reduce exposure if the app is compromised
🔘 C) To make them work offline
🔘 D) To reduce memory usage

✅ Correct Answer: B) To reduce exposure if the app is compromised
📝 Explanation: If a mobile app controlling smart devices is hacked, limiting permissions prevents excessive data access or control.

36. What does disabling voice purchasing on smart assistants prevent?

🔘 A) Unauthorized transactions by attackers or children
🔘 B) Reduced voice recognition speed
🔘 C) Improved device response time
🔘 D) Prevention of firmware corruption

✅ Correct Answer: A) Unauthorized transactions by attackers or children
📝 Explanation: Attackers (or even children) can place orders using voice commands if voice purchasing is enabled.

37. What security risk does an outdated smart home firmware pose?

🔘 A) Devices become slower
🔘 B) Increased vulnerability to known exploits
🔘 C) The device loses internet access
🔘 D) It disables encryption

✅ Correct Answer: B) Increased vulnerability to known exploits
📝 Explanation: Older firmware often contains unpatched vulnerabilities, making it easier for attackers to exploit known security flaws.

38. What is the benefit of using Multi-Factor Authentication (MFA) for smart home accounts?

🔘 A) Prevents unauthorized access even if passwords are stolen
🔘 B) Improves internet speed
🔘 C) Reduces power consumption
🔘 D) Eliminates the need for software updates

✅ Correct Answer: A) Prevents unauthorized access even if passwords are stolen
📝 Explanation: MFA adds an extra layer of security, requiring a second factor (e.g., OTP, biometric) even if an attacker steals your password.

39. What type of cyberattack targets smart home devices by flooding them with excessive network traffic?

🔘 A) Brute-force attack
🔘 B) Phishing attack
🔘 C) DDoS attack
🔘 D) MITM attack

✅ Correct Answer: C) DDoS attack
📝 Explanation: Distributed Denial of Service (DDoS) attacks send excessive traffic to overload smart home devices, often using botnets.

40. How can an attacker exploit a misconfigured smart lock API?

🔘 A) By sending unauthorized API requests to unlock the door
🔘 B) By reducing battery life
🔘 C) By jamming the Wi-Fi signal
🔘 D) By changing the device’s IP address

✅ Correct Answer: A) By sending unauthorized API requests to unlock the door
📝 Explanation: Attackers target insecure APIs to send malicious requests that bypass authentication and unlock smart locks remotely.

41. What is an effective way to prevent smart devices from connecting to rogue Wi-Fi networks?

🔘 A) Using WPA3 encryption
🔘 B) Disabling automatic network connection
🔘 C) Increasing router signal strength
🔘 D) Using a VPN

✅ Correct Answer: B) Disabling automatic network connection
📝 Explanation: Auto-connect features can make devices join fake Wi-Fi networks (Evil Twin attacks), leading to man-in-the-middle exploits.

42. What is the safest way to discard a smart home device to prevent data leaks?

🔘 A) Physically destroy it
🔘 B) Perform a factory reset and remove linked accounts
🔘 C) Sell it without any reset
🔘 D) Keep it disconnected from Wi-Fi for a month

✅ Correct Answer: B) Perform a factory reset and remove linked accounts
📝 Explanation: Factory reset erases stored data, and unlinking accounts ensures attackers can’t access previous settings.

43. How can an attacker exploit an insecure cloud storage integration in smart home devices?

🔘 A) By altering firmware
🔘 B) By intercepting and stealing stored data
🔘 C) By disabling remote access
🔘 D) By corrupting encryption keys

✅ Correct Answer: B) By intercepting and stealing stored data
📝 Explanation: If smart device cloud storage is unencrypted or weakly secured, attackers can access, modify, or delete stored data.

44. Why should you disable SSID broadcasting for your smart home Wi-Fi network?

🔘 A) It prevents devices from automatically connecting to the network
🔘 B) It stops attackers from detecting your network name
🔘 C) It improves network speed
🔘 D) It extends the range of your Wi-Fi

✅ Correct Answer: B) It stops attackers from detecting your network name
📝 Explanation: Disabling SSID broadcasting makes the network invisible to casual attackers using Wi-Fi scanning tools. However, skilled attackers can still detect hidden networks.

45. What is a key risk of using IoT devices that rely on weak default encryption?

🔘 A) Increased power consumption
🔘 B) Data can be intercepted and manipulated
🔘 C) Devices cannot be factory reset
🔘 D) They become incompatible with 5 GHz Wi-Fi

✅ Correct Answer: B) Data can be intercepted and manipulated
📝 Explanation: Weak encryption (or none at all) allows attackers to intercept, modify, or inject malicious commands into communication between devices.

46. What is the primary risk of leaving smart home devices connected to a compromised cloud service?

🔘 A) It reduces device performance
🔘 B) Attackers can gain persistent access to devices
🔘 C) The device stops working offline
🔘 D) It increases data transfer rates

✅ Correct Answer: B) Attackers can gain persistent access to devices
📝 Explanation: If a cloud service is breached, attackers may gain long-term access to linked smart home devices or extract sensitive information.

47. What is a recommended security practice for updating smart home device firmware?

🔘 A) Enable automatic updates
🔘 B) Manually update every 6 months
🔘 C) Only update if the device stops working
🔘 D) Never update to avoid new vulnerabilities

✅ Correct Answer: A) Enable automatic updates
📝 Explanation: Automatic updates patch security vulnerabilities and prevent attackers from exploiting outdated firmware.

48. How does a brute-force attack compromise smart home security?

🔘 A) It tricks the device into factory resetting
🔘 B) It continuously guesses passwords until access is granted
🔘 C) It disables device encryption
🔘 D) It forces a firmware rollback

✅ Correct Answer: B) It continuously guesses passwords until access is granted
📝 Explanation: Attackers use brute-force attacks to systematically try different password combinations until they gain access to smart home accounts.

49. What is an effective way to protect smart home cameras from unauthorized access?

🔘 A) Use cameras without cloud storage
🔘 B) Set up unique, strong passwords and enable two-factor authentication
🔘 C) Turn off the camera after every use
🔘 D) Cover the camera lens with tape

✅ Correct Answer: B) Set up unique, strong passwords and enable two-factor authentication
📝 Explanation: Using strong credentials and enabling 2FA significantly reduces the risk of camera hacking and unauthorized access.

50. What type of malware can infect smart home devices and turn them into part of a botnet?

🔘 A) Ransomware
🔘 B) Mirai
🔘 C) Keylogger
🔘 D) Rootkit

✅ Correct Answer: B) Mirai
📝 Explanation: Mirai malware infects IoT devices with default credentials, turning them into a botnet used for large-scale cyberattacks.

51. How can an attacker use smart home devices for eavesdropping?

🔘 A) Exploiting a vulnerability in a voice assistant
🔘 B) Remotely activating a smart camera’s microphone
🔘 C) Using malware to capture audio logs
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Attackers can exploit vulnerabilities in smart assistants, cameras, or install malware to record and steal sensitive conversations.

52. What is a risk of using third-party smart home apps not approved by manufacturers?

🔘 A) Reduced device functionality
🔘 B) Potential malware or unauthorized access
🔘 C) Increased internet speed
🔘 D) Higher battery consumption

✅ Correct Answer: B) Potential malware or unauthorized access
📝 Explanation: Unverified third-party apps may contain malware, backdoors, or phishing schemes that steal credentials or control devices.

53. Why should you regularly review permissions granted to smart home apps?

🔘 A) To improve app performance
🔘 B) To ensure apps don’t have unnecessary access to personal data
🔘 C) To make updates easier
🔘 D) To increase device battery life

✅ Correct Answer: B) To ensure apps don’t have unnecessary access to personal data
📝 Explanation: Apps with unnecessary permissions (e.g., microphone, camera, location) increase privacy risks if compromised.

54. What does an Evil Maid Attack target in smart home security?

🔘 A) Physical access to a device to install malware
🔘 B) Hacking cloud storage
🔘 C) Overloading smart home Wi-Fi
🔘 D) Disrupting Bluetooth connections

✅ Correct Answer: A) Physical access to a device to install malware
📝 Explanation: In an Evil Maid Attack, an attacker gains physical access to a device and installs malware to spy, steal data, or gain remote access.

55. How can an attacker exploit a smart lock with a replay attack?

🔘 A) By physically breaking the lock
🔘 B) By recording and replaying wireless authentication signals
🔘 C) By changing the lock’s firmware
🔘 D) By forcing the lock to reboot

✅ Correct Answer: B) By recording and replaying wireless authentication signals
📝 Explanation: Replay attacks involve capturing wireless signals (Bluetooth, RFID, NFC) and replaying them to unlock smart locks without authorization.

56. What is a major risk of integrating smart home devices with social media accounts?

🔘 A) Increased power consumption
🔘 B) Exposure to social engineering attacks
🔘 C) Reduced Wi-Fi performance
🔘 D) Decreased device lifespan

✅ Correct Answer: B) Exposure to social engineering attacks
📝 Explanation: Attackers can manipulate social media-linked smart home accounts to reset passwords or gain access via phishing attacks.

57. Why should you use network segmentation for smart home devices?

🔘 A) To increase download speeds
🔘 B) To limit the spread of a compromise if one device is hacked
🔘 C) To prioritize smart devices over gaming consoles
🔘 D) To make network setup easier

✅ Correct Answer: B) To limit the spread of a compromise if one device is hacked
📝 Explanation: Network segmentation ensures that if one device is compromised, attackers can’t access other critical devices (PCs, servers, etc.).

58. What is an effective way to prevent unauthorized unlocking of a smart door via Bluetooth?

🔘 A) Enabling strong encryption and two-factor authentication
🔘 B) Keeping Bluetooth disabled at all times
🔘 C) Switching to a manual lock
🔘 D) Using a password-protected app

✅ Correct Answer: A) Enabling strong encryption and two-factor authentication
📝 Explanation: Strong encryption and 2FA prevent attackers from intercepting Bluetooth signals and gaining unauthorized control.

59. What is the role of a security gateway in a smart home network?

🔘 A) It prioritizes gaming traffic over IoT devices
🔘 B) It isolates IoT devices and protects them from direct internet exposure
🔘 C) It acts as a power source for smart devices
🔘 D) It speeds up data transfer between devices

✅ Correct Answer: B) It isolates IoT devices and protects them from direct internet exposure
📝 Explanation: Security gateways act as firewalls that block unauthorized access and prevent IoT devices from being directly exposed to the internet.

60. What is a major risk of using weak or common PINs on smart home security devices?

🔘 A) Devices take longer to authenticate
🔘 B) Increased vulnerability to brute-force attacks
🔘 C) Higher energy consumption
🔘 D) Shorter device lifespan

✅ Correct Answer: B) Increased vulnerability to brute-force attacks
📝 Explanation: Weak PINs can be easily guessed or brute-forced, allowing attackers to gain access to smart locks, security systems, or assistants.

61. What is an effective way to secure smart home devices from zero-day vulnerabilities?

🔘 A) Use devices that do not connect to the internet
🔘 B) Apply security patches and firmware updates as soon as they are available
🔘 C) Use a wired network instead of Wi-Fi
🔘 D) Disable device encryption

✅ Correct Answer: B) Apply security patches and firmware updates as soon as they are available
📝 Explanation: Zero-day vulnerabilities are unknown exploits, and patches released by manufacturers help fix security flaws before they are widely exploited.

62. How can attackers exploit default admin accounts on smart home devices?

🔘 A) By using brute-force attacks to guess passwords
🔘 B) By exploiting weak encryption methods
🔘 C) By intercepting network traffic
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Default admin credentials are often easy to guess, and if unchanged, attackers can brute-force, intercept, or exploit them to take over devices.

63. What is the safest way to grant guests access to a smart home security system?

🔘 A) Share your main account credentials
🔘 B) Create a temporary guest account with limited permissions
🔘 C) Leave the smart lock in an unlocked state
🔘 D) Disable security features while guests are present

✅ Correct Answer: B) Create a temporary guest account with limited permissions
📝 Explanation: A guest account with limited access prevents guests from making unauthorized changes or accessing sensitive information.

64. What attack vector exploits vulnerabilities in smart home device APIs?

🔘 A) Phishing attacks
🔘 B) API Injection Attacks
🔘 C) Bluetooth jamming
🔘 D) Evil Twin Attack

✅ Correct Answer: B) API Injection Attacks
📝 Explanation: Attackers target insecure APIs by injecting malicious requests, bypassing authentication, or altering smart device functions.

65. How can an attacker use a hacked smart assistant to compromise security?

🔘 A) By issuing unauthorized voice commands remotely
🔘 B) By installing malware on linked devices
🔘 C) By recording and transmitting private conversations
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: If hacked, a smart assistant can record audio, control smart home devices, and install malware on linked systems.

66. What security risk is introduced by allowing smart cameras to upload footage to the cloud?

🔘 A) Increased storage capacity
🔘 B) Potential exposure of sensitive footage if the cloud service is hacked
🔘 C) Faster access to recorded events
🔘 D) Reduced local device storage usage

✅ Correct Answer: B) Potential exposure of sensitive footage if the cloud service is hacked
📝 Explanation: Cloud storage introduces third-party risks, as attackers may breach weakly secured cloud servers to access recorded footage.

67. What type of attack involves tricking a smart home device into connecting to a rogue network?

🔘 A) Social Engineering Attack
🔘 B) Evil Twin Attack
🔘 C) Watering Hole Attack
🔘 D) Smurf Attack

✅ Correct Answer: B) Evil Twin Attack
📝 Explanation: Evil Twin Attacks use a fake Wi-Fi access point that mimics a real network, tricking smart devices into connecting and exposing their traffic.

68. Why is using SMS-based authentication alone for smart home accounts considered insecure?

🔘 A) SMS can be intercepted via SIM swapping or phishing attacks
🔘 B) SMS messages take too long to receive
🔘 C) SMS-based 2FA is always secure
🔘 D) Smart devices do not support SMS authentication

✅ Correct Answer: A) SMS can be intercepted via SIM swapping or phishing attacks
📝 Explanation: Attackers can hijack phone numbers using SIM swapping or intercept SMS-based authentication codes to bypass security measures.

69. What is the benefit of using a hardware security key for smart home authentication?

🔘 A) It eliminates the need for passwords
🔘 B) It provides phishing-resistant authentication
🔘 C) It makes devices faster
🔘 D) It extends battery life of smart locks

✅ Correct Answer: B) It provides phishing-resistant authentication
📝 Explanation: Hardware security keys (like YubiKey) prevent phishing attacks by requiring physical possession for authentication.

70. What is a common reason why smart locks become unresponsive?

🔘 A) Bluetooth signal interference
🔘 B) Low battery power
🔘 C) Firmware corruption
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Smart locks can fail due to battery issues, signal interference, or firmware corruption, making proper maintenance crucial.

71. What technique helps prevent an attacker from brute-forcing a smart lock’s PIN code?

🔘 A) Implementing rate limiting and account lockout mechanisms
🔘 B) Using only 4-digit PIN codes
🔘 C) Disabling the lock after 3 failed attempts
🔘 D) Switching to a mechanical key

✅ Correct Answer: A) Implementing rate limiting and account lockout mechanisms
📝 Explanation: Rate limiting and temporary lockouts make brute-force attacks time-consuming and ineffective.

72. How can an attacker exploit an insecure smart doorbell system?

🔘 A) By intercepting video footage
🔘 B) By bypassing weak authentication methods
🔘 C) By tampering with firmware
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Smart doorbells can be hacked via unencrypted video streams, weak login credentials, or outdated firmware vulnerabilities.

73. What is a secure alternative to using a traditional password for smart home login?

🔘 A) Using a simple 6-digit PIN
🔘 B) Using biometric authentication with 2FA
🔘 C) Disabling authentication altogether
🔘 D) Using public Wi-Fi for login

✅ Correct Answer: B) Using biometric authentication with 2FA
📝 Explanation: Combining biometrics with 2FA enhances security by requiring multiple forms of authentication.

74. What is the primary advantage of using local storage over cloud storage for smart home cameras?

🔘 A) Faster data retrieval
🔘 B) Greater control over security and privacy
🔘 C) Lower power consumption
🔘 D) Unlimited storage capacity

✅ Correct Answer: B) Greater control over security and privacy
📝 Explanation: Local storage eliminates third-party cloud risks, preventing data leaks due to cloud breaches.

75. What type of attack allows an attacker to inject malicious commands into a smart home hub?

🔘 A) SQL Injection
🔘 B) Command Injection
🔘 C) Cross-Site Scripting (XSS)
🔘 D) Phishing Attack

✅ Correct Answer: B) Command Injection
📝 Explanation: Command injection exploits poorly secured APIs to send unauthorized commands to smart home hubs.

76. How can a smart plug become a security risk?

🔘 A) If it connects to an unsecured cloud service
🔘 B) If it allows remote control without authentication
🔘 C) If it has outdated firmware
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Smart plugs with poor security settings can be remotely controlled by attackers, leading to malware infections or home intrusions.

78. How can attackers compromise a smart thermostat to cause physical damage?

🔘 A) By increasing or decreasing temperature beyond safe limits
🔘 B) By disabling Wi-Fi connectivity
🔘 C) By changing the device name
🔘 D) By altering the display settings

✅ Correct Answer: A) By increasing or decreasing temperature beyond safe limits
📝 Explanation: Attackers can remotely control smart thermostats to overheat electrical systems or freeze water pipes, causing physical damage.

79. What type of encryption is best for securing smart home devices’ network communication?

🔘 A) WEP
🔘 B) AES-256
🔘 C) XOR Encryption
🔘 D) Base64 Encoding

✅ Correct Answer: B) AES-256
📝 Explanation: AES-256 is a strong encryption standard used to secure smart device communications and prevent data interception.

80. What is the purpose of a VPN in a smart home network?

🔘 A) To improve network speed
🔘 B) To encrypt data and secure remote access
🔘 C) To allow public access to smart devices
🔘 D) To prioritize smart home traffic

✅ Correct Answer: B) To encrypt data and secure remote access
📝 Explanation: A VPN (Virtual Private Network) encrypts network traffic, securing remote access to smart home devices against attackers.

81. Why should default port numbers be changed for smart home devices?

🔘 A) To prevent port-scanning attacks
🔘 B) To increase device speed
🔘 C) To reduce network congestion
🔘 D) To allow guest access

✅ Correct Answer: A) To prevent port-scanning attacks
📝 Explanation: Hackers often scan for default ports (e.g., 3389 for RDP, 23 for Telnet) to find exposed smart devices for attacks.

82. How can an attacker use a compromised smart speaker to steal sensitive data?

🔘 A) By recording private conversations
🔘 B) By hijacking voice commands
🔘 C) By sending fraudulent responses to the user
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: A hacked smart speaker can be remotely controlled to eavesdrop, manipulate responses, or execute malicious commands.

83. What is the primary risk of using outdated smart home apps?

🔘 A) Reduced battery life
🔘 B) Unpatched security vulnerabilities
🔘 C) Increased device temperature
🔘 D) Slower app performance

✅ Correct Answer: B) Unpatched security vulnerabilities
📝 Explanation: Outdated apps may contain known security flaws, allowing attackers to exploit weaknesses and compromise smart home systems.

84. How does two-factor authentication (2FA) enhance smart home security?

🔘 A) It prevents unauthorized access even if passwords are stolen
🔘 B) It makes login faster
🔘 C) It eliminates the need for passwords
🔘 D) It allows multiple devices to use the same password

✅ Correct Answer: A) It prevents unauthorized access even if passwords are stolen
📝 Explanation: 2FA adds an extra security layer, requiring an additional verification step beyond just a password.

85. What is a common technique attackers use to hijack smart home accounts?

🔘 A) Credential stuffing
🔘 B) Smart device overheating
🔘 C) Firmware tampering
🔘 D) Disabling notifications

✅ Correct Answer: A) Credential stuffing
📝 Explanation: Attackers use lists of leaked username-password pairs to try and gain unauthorized access to smart home accounts.

86. How can an attacker exploit weak cloud-based authentication in smart home systems?

🔘 A) By launching phishing attacks
🔘 B) By using brute-force password attempts
🔘 C) By exploiting unencrypted data transmissions
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Weak authentication can lead to credential theft, brute-force attacks, and data leaks, compromising smart home security.

87. What is an effective method to prevent malware infections on smart home devices?

🔘 A) Use antivirus software
🔘 B) Regularly update firmware and software
🔘 C) Keep all devices offline permanently
🔘 D) Use weak encryption to avoid detection

✅ Correct Answer: B) Regularly update firmware and software
📝 Explanation: Firmware updates patch security flaws, preventing malware infections and cyber attacks.

88. How can a smart home hub be exploited by attackers?

🔘 A) By gaining remote access to linked devices
🔘 B) By tricking it into running malicious firmware
🔘 C) By intercepting unencrypted communications
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: A compromised smart home hub can be used to control all linked devices, making it a high-value target for attackers.

89. Why is network segmentation important in a smart home?

🔘 A) To prevent unauthorized access between critical and IoT devices
🔘 B) To make network configuration simpler
🔘 C) To reduce electricity usage
🔘 D) To increase internet speed

✅ Correct Answer: A) To prevent unauthorized access between critical and IoT devices
📝 Explanation: Separating IoT devices from main devices ensures that compromised smart devices don’t endanger personal or business systems.

90. What is a risk of using voice authentication in smart home systems?

🔘 A) It can be bypassed using recorded or synthetic voices
🔘 B) It improves security but makes devices slower
🔘 C) It makes login too complex
🔘 D) It consumes too much bandwidth

✅ Correct Answer: A) It can be bypassed using recorded or synthetic voices
📝 Explanation: Attackers can use AI-generated voices or recordings to trick voice authentication systems into granting unauthorized access.

91. How can an attacker manipulate a smart lighting system?

🔘 A) By exploiting unencrypted communication
🔘 B) By using malware to hijack the control app
🔘 C) By brute-forcing weak authentication credentials
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Smart lighting systems can be compromised through unencrypted traffic, hacked apps, or brute-force login attempts, allowing attackers to manipulate lighting settings remotely.

92. What is the primary risk of connecting smart home devices to a public Wi-Fi network?

🔘 A) Increased latency in communication
🔘 B) Devices become visible to potential attackers
🔘 C) Slower firmware updates
🔘 D) Limited battery performance

✅ Correct Answer: B) Devices become visible to potential attackers
📝 Explanation: Public Wi-Fi networks lack encryption and security controls, making smart devices more vulnerable to attacks like eavesdropping and MITM.

93. What is the role of AI in improving smart home security?

🔘 A) It detects and blocks suspicious activity
🔘 B) It provides faster internet speeds
🔘 C) It reduces device power consumption
🔘 D) It prevents brute-force attacks automatically

✅ Correct Answer: A) It detects and blocks suspicious activity
📝 Explanation: AI-driven security systems analyze patterns, detect anomalies, and automatically block threats, enhancing smart home security.

94. How can attackers compromise smart pet feeders?

🔘 A) By remotely changing feeding schedules
🔘 B) By disabling notifications to pet owners
🔘 C) By using default credentials to gain access
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Hacked smart pet feeders can be used to change food dispensing schedules, disable alerts, or gain remote control using weak authentication.

95. What security measure should be enabled on a smart security camera to prevent unauthorized access?

🔘 A) Encrypted video storage
🔘 B) Two-Factor Authentication (2FA)
🔘 C) Disabling remote access if not needed
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Encrypted storage, 2FA, and disabling remote access help secure smart cameras against unauthorized access.

96. How can attackers abuse smart garage door openers?

🔘 A) By jamming the signal to prevent operation
🔘 B) By using replay attacks to duplicate access signals
🔘 C) By brute-forcing default passwords
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Attackers can jam signals, intercept and replay access commands, or exploit weak credentials to gain unauthorized access.

97. What is a key security risk when using IoT-enabled smart refrigerators?

🔘 A) Unauthorized access to stored food inventory
🔘 B) Leak of user shopping habits and preferences
🔘 C) Overheating due to cyberattacks
🔘 D) Increased electricity consumption

✅ Correct Answer: B) Leak of user shopping habits and preferences
📝 Explanation: Smart refrigerators store shopping and usage data, which, if leaked, can reveal sensitive personal habits or be sold to advertisers.

98. How can attackers compromise a smart baby monitor?

🔘 A) By exploiting unpatched firmware vulnerabilities
🔘 B) By gaining access through weak Wi-Fi security
🔘 C) By using default or weak credentials
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Hackers can gain access to smart baby monitors via default credentials, weak Wi-Fi security, or firmware vulnerabilities, allowing them to spy on live feeds or control the device remotely.

99. What is a common vulnerability in smart home motion sensors?

🔘 A) They can be bypassed using infrared jamming techniques
🔘 B) They always require cloud connectivity
🔘 C) They cannot detect slow movement
🔘 D) They interfere with Wi-Fi signals

✅ Correct Answer: A) They can be bypassed using infrared jamming techniques
📝 Explanation: Attackers can use infrared jammers to disrupt motion sensors, preventing them from detecting movement in secured areas.

100. Why should smart doorbell notifications be encrypted?

🔘 A) To prevent attackers from intercepting activity logs
🔘 B) To improve battery performance
🔘 C) To reduce false alarms
🔘 D) To make the doorbell ring faster

✅ Correct Answer: A) To prevent attackers from intercepting activity logs
📝 Explanation: Unencrypted notifications can be intercepted by attackers, allowing them to monitor home activity patterns and determine when residents are away.

101. How can an attacker exploit weak Bluetooth pairing in smart home devices?

🔘 A) By using a brute-force attack to guess pairing codes
🔘 B) By eavesdropping on Bluetooth signals
🔘 C) By hijacking the connection and sending malicious commands
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Weak Bluetooth pairing methods can be exploited by attackers using brute-force, eavesdropping, or connection hijacking techniques.

102. What is a common risk when integrating third-party smart home applications?

🔘 A) They may introduce vulnerabilities due to poor security practices
🔘 B) They always improve device performance
🔘 C) They offer better customer support
🔘 D) They require more Wi-Fi bandwidth

✅ Correct Answer: A) They may introduce vulnerabilities due to poor security practices
📝 Explanation: Third-party apps may lack proper security measures, making them an entry point for hackers to exploit smart home devices.

103. What is the risk of using an unsecured API in a smart home system?

🔘 A) It allows attackers to send unauthorized commands
🔘 B) It improves device communication speed
🔘 C) It reduces the risk of hacking
🔘 D) It prevents firmware updates

✅ Correct Answer: A) It allows attackers to send unauthorized commands
📝 Explanation: Unsecured APIs allow hackers to execute malicious requests, control devices remotely, or access sensitive data.

104. Why should you disable voice control for financial transactions on smart assistants?

🔘 A) It can be exploited through voice spoofing attacks
🔘 B) It slows down smart assistant performance
🔘 C) It prevents updates from being installed
🔘 D) It drains battery faster

✅ Correct Answer: A) It can be exploited through voice spoofing attacks
📝 Explanation: Attackers can use recorded or synthetic voices to authorize unauthorized financial transactions.

105. How can attackers use malware-infected smart home devices?

🔘 A) To launch Distributed Denial of Service (DDoS) attacks
🔘 B) To steal network credentials
🔘 C) To gain unauthorized access to other connected devices
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Compromised smart devices can be used in DDoS attacks, data theft, and lateral movement to hack other devices on the network.

106. What is a primary security concern with using voice-activated smart home assistants?

🔘 A) They can store and transmit private conversations
🔘 B) They slow down network speeds
🔘 C) They require frequent reboots
🔘 D) They consume too much electricity

✅ Correct Answer: A) They can store and transmit private conversations
📝 Explanation: Smart assistants record and store voice commands, and if compromised, attackers may access sensitive conversations.

107. What type of cyberattack exploits the lack of authentication in smart home IoT APIs?

🔘 A) Man-in-the-Middle (MITM) Attack
🔘 B) API Exploitation Attack
🔘 C) Brute-force Attack
🔘 D) Phishing Attack

✅ Correct Answer: B) API Exploitation Attack
📝 Explanation: Poorly secured APIs allow attackers to send unauthorized commands, extract data, or control devices remotely.

108. What is a potential risk of integrating smart home devices with social media accounts?

🔘 A) Attackers can extract personal information and security settings
🔘 B) The devices will stop working offline
🔘 C) The devices consume more bandwidth
🔘 D) The integration shortens device lifespan

✅ Correct Answer: A) Attackers can extract personal information and security settings
📝 Explanation: Social media-linked accounts can be targeted by phishing or credential-stuffing attacks, exposing personal details and security settings.

109. How can an attacker exploit weak IoT firmware security in smart home devices?

🔘 A) By reverse-engineering the firmware to find vulnerabilities
🔘 B) By corrupting device memory
🔘 C) By installing third-party security patches
🔘 D) By using excessive power consumption

✅ Correct Answer: A) By reverse-engineering the firmware to find vulnerabilities
📝 Explanation: Attackers analyze firmware code to discover hardcoded credentials, weak encryption, or unpatched security flaws.

110. Why is using biometric authentication alone for smart locks risky?

🔘 A) Biometric data can be stolen and cannot be changed
🔘 B) It requires frequent reauthentication
🔘 C) It slows down the unlocking process
🔘 D) It consumes too much battery

✅ Correct Answer: A) Biometric data can be stolen and cannot be changed
📝 Explanation: Unlike passwords, stolen biometric data (fingerprints, facial scans) cannot be reset, making it a permanent security risk.

111. What is a recommended practice to prevent Wi-Fi deauthentication attacks on smart home devices?

🔘 A) Disable SSID broadcasting
🔘 B) Use WPA3 encryption with Protected Management Frames (PMF)
🔘 C) Set up a hidden guest network
🔘 D) Change the Wi-Fi password every week

✅ Correct Answer: B) Use WPA3 encryption with Protected Management Frames (PMF)
📝 Explanation: PMF in WPA3 encryption helps prevent deauthentication attacks that force devices to disconnect from the network.

112. What is the biggest risk when using smart home automation rules (e.g., “if this, then that” triggers)?

🔘 A) Automation commands can be manipulated by attackers
🔘 B) Automation makes devices respond too slowly
🔘 C) Automation consumes additional internet bandwidth
🔘 D) Automation causes devices to overheat

✅ Correct Answer: A) Automation commands can be manipulated by attackers
📝 Explanation: If smart home automation rules are poorly secured, attackers can trigger unauthorized actions such as unlocking doors or disabling alarms.

113. How does an Evil Twin attack threaten smart home security?

🔘 A) It disrupts cloud storage backups
🔘 B) It tricks smart devices into connecting to a rogue Wi-Fi network
🔘 C) It increases device power consumption
🔘 D) It prevents firmware updates

✅ Correct Answer: B) It tricks smart devices into connecting to a rogue Wi-Fi network
📝 Explanation: In an Evil Twin attack, hackers create a fake Wi-Fi network that appears legitimate, tricking devices into connecting and exposing data.

114. What security risk does an always-on smart home microphone present?

🔘 A) It can be remotely activated by hackers
🔘 B) It drains battery faster
🔘 C) It overheats the device
🔘 D) It requires constant software updates

✅ Correct Answer: A) It can be remotely activated by hackers
📝 Explanation: Attackers can remotely activate microphones on smart devices to eavesdrop on conversations and steal private information.

115. How can attackers manipulate smart home temperature sensors?

🔘 A) By remotely adjusting temperature settings via weak authentication
🔘 B) By tampering with external temperature readings
🔘 C) By disrupting sensor communication
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Attackers can tamper with temperature data, disrupt communication, or use weak authentication to control smart thermostats.

116. What is the primary function of a firewall in a smart home security system?

🔘 A) To monitor and control incoming and outgoing network traffic
🔘 B) To increase device processing speed
🔘 C) To encrypt stored data
🔘 D) To extend network range

✅ Correct Answer: A) To monitor and control incoming and outgoing network traffic
📝 Explanation: Firewalls block unauthorized access, helping to detect and mitigate cyber threats targeting smart home devices.

117. What is an effective way to protect smart home cameras from unauthorized remote access?

🔘 A) Use end-to-end encryption for video streams
🔘 B) Keep the camera disconnected from Wi-Fi
🔘 C) Cover the camera lens when not in use
🔘 D) Set the camera’s resolution to the lowest setting

✅ Correct Answer: A) Use end-to-end encryption for video streams
📝 Explanation: End-to-end encryption prevents attackers from intercepting video feeds, ensuring only authorized users can access footage.

118. Why is it recommended to disable Universal Plug and Play (UPnP) on smart home networks?

🔘 A) It prevents devices from automatically opening network ports
🔘 B) It increases network speed
🔘 C) It reduces battery consumption on smart devices
🔘 D) It prevents firmware updates

✅ Correct Answer: A) It prevents devices from automatically opening network ports
📝 Explanation: UPnP automatically opens ports, which can expose devices to unauthorized remote access if hackers scan for open ports.

119. What type of attack targets smart locks that use RFID authentication?

🔘 A) Relay attack
🔘 B) Ransomware attack
🔘 C) SQL injection attack
🔘 D) Buffer overflow attack

✅ Correct Answer: A) Relay attack
📝 Explanation: In a relay attack, attackers relay RFID signals from an authorized key fob to a smart lock, tricking it into unlocking.

120. What is the risk of using a single, shared password across multiple smart home devices?

🔘 A) If one device is compromised, all others can be accessed
🔘 B) It slows down login times
🔘 C) It increases network congestion
🔘 D) It consumes more battery power

✅ Correct Answer: A) If one device is compromised, all others can be accessed
📝 Explanation: Using the same password across multiple devices increases the risk of credential-stuffing attacks, where hackers use stolen passwords to access multiple accounts.

121. What is the primary security risk of using a smart home hub that controls multiple devices?

🔘 A) It slows down internet speed
🔘 B) If compromised, attackers can control all connected devices
🔘 C) It consumes excessive bandwidth
🔘 D) It prevents firmware updates

✅ Correct Answer: B) If compromised, attackers can control all connected devices
📝 Explanation: A smart home hub acts as a centralized control point, meaning a breach could give an attacker control over all linked devices.

122. What is an effective way to prevent unauthorized network sniffing of smart home devices?

🔘 A) Use a VPN to encrypt network traffic
🔘 B) Keep all devices disconnected from Wi-Fi
🔘 C) Use a public Wi-Fi network
🔘 D) Disable encryption on smart home devices

✅ Correct Answer: A) Use a VPN to encrypt network traffic
📝 Explanation: A VPN (Virtual Private Network) encrypts data in transit, preventing attackers from intercepting communications between smart home devices.

123. What is a key weakness of Zigbee and Z-Wave smart home communication protocols?

🔘 A) They rely on low-frequency signals that are easy to intercept
🔘 B) They do not support smart home automation
🔘 C) They cannot be connected to the internet
🔘 D) They require more power than Wi-Fi

✅ Correct Answer: A) They rely on low-frequency signals that are easy to intercept
📝 Explanation: Zigbee and Z-Wave operate on radio frequencies, making them vulnerable to replay attacks and signal interception without proper encryption.

124. What type of attack targets smart home devices using exposed Telnet services?

🔘 A) Mirai Botnet Attack
🔘 B) Phishing Attack
🔘 C) SQL Injection Attack
🔘 D) DNS Spoofing

✅ Correct Answer: A) Mirai Botnet Attack
📝 Explanation: Mirai malware exploits default Telnet credentials on smart home IoT devices, adding them to DDoS botnets.

125. How can attackers compromise a smart home system through mobile applications?

🔘 A) By exploiting outdated apps with security vulnerabilities
🔘 B) By using social engineering attacks to steal login credentials
🔘 C) By injecting malware through fake apps
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Insecure mobile apps, phishing, and malware-infected apps can give attackers remote access to smart home devices.

126. How can attackers use a smart assistant to carry out unauthorized actions?

🔘 A) By using ultrasonic (inaudible) voice commands (DolphinAttack)
🔘 B) By exploiting unpatched vulnerabilities in the software
🔘 C) By gaining access to linked accounts and issuing remote commands
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Voice spoofing, software vulnerabilities, and linked account takeovers allow attackers to control smart assistants remotely.

127. What is an effective method to protect smart home routers from unauthorized access?

🔘 A) Disable remote administration
🔘 B) Use strong WPA3 encryption
🔘 C) Change default admin credentials
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Disabling remote access, using WPA3, and changing default passwords strengthens router security against unauthorized access.

128. How does disabling “Guest Mode” on smart home devices improve security?

🔘 A) It prevents unauthorized users from connecting
🔘 B) It improves Wi-Fi speed
🔘 C) It increases device battery life
🔘 D) It extends device lifespan

✅ Correct Answer: A) It prevents unauthorized users from connecting
📝 Explanation: Guest Mode allows temporary connections, which attackers could exploit to gain access to the smart home network.

129. What security risk does integrating smart home devices with cloud services introduce?

🔘 A) Increased dependency on internet connectivity
🔘 B) Potential exposure of data in cloud breaches
🔘 C) Higher risk of unauthorized remote access
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Cloud services increase risks of data breaches, unauthorized access, and connectivity-based attacks.

130. Why is regularly changing Wi-Fi passwords important for smart home security?

🔘 A) It reduces the risk of brute-force attacks
🔘 B) It prevents unauthorized users from maintaining persistent access
🔘 C) It mitigates risks if previous passwords were leaked
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Regularly updating Wi-Fi passwords helps prevent unauthorized access from compromised or leaked credentials.

131. What security measure can protect a smart TV from cyber threats?

🔘 A) Disabling internet connectivity when not in use
🔘 B) Updating firmware regularly
🔘 C) Blocking unnecessary network ports
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Smart TVs can be hacked via outdated firmware, exposed ports, and internet-connected vulnerabilities, requiring multiple security measures.

132. How can attackers use RFID skimming to compromise smart home access control?

🔘 A) By cloning RFID-based smart locks
🔘 B) By disabling RFID signals remotely
🔘 C) By jamming RFID communication
🔘 D) By increasing RFID signal range

✅ Correct Answer: A) By cloning RFID-based smart locks
📝 Explanation: Attackers capture RFID signals and replay them to gain unauthorized access to smart locks.

133. Why is network monitoring important in smart home security?

🔘 A) It helps detect unauthorized access attempts
🔘 B) It prevents overheating of smart devices
🔘 C) It speeds up data transfer
🔘 D) It allows guest users to connect faster

✅ Correct Answer: A) It helps detect unauthorized access attempts
📝 Explanation: Network monitoring tools can detect suspicious activity, helping to prevent security breaches.

134. What risk does using an outdated smart door lock pose?

🔘 A) It may be vulnerable to previously known exploits
🔘 B) It drains battery faster
🔘 C) It prevents firmware updates
🔘 D) It requires frequent recalibration

✅ Correct Answer: A) It may be vulnerable to previously known exploits
📝 Explanation: Older smart locks with outdated firmware may contain known vulnerabilities that hackers can exploit.

135. What security feature should smart doorbells include to prevent unauthorized access?

🔘 A) Encrypted video transmission
🔘 B) Strong password authentication
🔘 C) Regular software updates
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Encryption, strong authentication, and updates help protect smart doorbells from hacking attempts.

136. What is a major security risk of using weak PIN codes for smart home access?

🔘 A) PINs can be easily guessed using brute-force attacks
🔘 B) It makes device setup slower
🔘 C) It consumes more network bandwidth
🔘 D) It prevents firmware updates

✅ Correct Answer: A) PINs can be easily guessed using brute-force attacks
📝 Explanation: Short or common PINs (like 1234) are vulnerable to brute-force attacks, allowing unauthorized access to smart locks and security systems.

137. How can attackers manipulate smart home door sensors?

🔘 A) By using magnets to trick the sensor into thinking the door is closed
🔘 B) By hacking the sensor’s Bluetooth connection
🔘 C) By physically tampering with the device
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Attackers can use magnets, Bluetooth exploits, or physical tampering to bypass smart door sensors and gain unauthorized entry.

138. What is a security risk of using voice-based authentication for smart locks?

🔘 A) It requires an internet connection
🔘 B) It can be bypassed using recorded or synthetic voices
🔘 C) It consumes excessive power
🔘 D) It slows down unlocking time

✅ Correct Answer: B) It can be bypassed using recorded or synthetic voices
📝 Explanation: Attackers can use AI-generated voices or recordings to fool voice authentication systems, gaining unauthorized access.

139. How can attackers exploit weak Bluetooth Low Energy (BLE) security in smart home devices?

🔘 A) By performing a replay attack to gain access
🔘 B) By sniffing unencrypted BLE traffic
🔘 C) By using BLE signal amplification to control devices remotely
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: BLE vulnerabilities can allow attackers to intercept, replay, or amplify signals to manipulate smart home devices.

140. Why should smart home owners disable unnecessary IoT device features?

🔘 A) To reduce the attack surface and minimize security risks
🔘 B) To extend battery life
🔘 C) To improve Wi-Fi speed
🔘 D) To make the device easier to use

✅ Correct Answer: A) To reduce the attack surface and minimize security risks
📝 Explanation: Disabling unused features (such as remote access or unnecessary APIs) helps reduce potential attack vectors.

141. What is a key advantage of using Zigbee over Wi-Fi for smart home devices?

🔘 A) Zigbee has stronger encryption
🔘 B) Zigbee consumes less power and reduces Wi-Fi congestion
🔘 C) Zigbee has a wider range than Wi-Fi
🔘 D) Zigbee is immune to cyberattacks

✅ Correct Answer: B) Zigbee consumes less power and reduces Wi-Fi congestion
📝 Explanation: Zigbee operates on a low-power mesh network, making it energy-efficient and reducing congestion compared to Wi-Fi.

142. How can attackers exploit smart home cloud services?

🔘 A) By stealing user credentials through phishing
🔘 B) By exploiting cloud API vulnerabilities
🔘 C) By performing a man-in-the-middle attack between the cloud and smart devices
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Attackers can compromise cloud accounts, exploit API vulnerabilities, or intercept cloud communications to gain unauthorized access to smart home systems.

143. What is a common mistake that exposes smart locks to security risks?

🔘 A) Using factory default passwords
🔘 B) Enabling guest access without restrictions
🔘 C) Not updating firmware regularly
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Default passwords, unrestricted guest access, and outdated firmware can make smart locks vulnerable to hacking attempts.

144. What is a primary reason why public Wi-Fi should not be used for smart home device control?

🔘 A) Public Wi-Fi networks are susceptible to MITM (Man-in-the-Middle) attacks
🔘 B) Smart home devices require a private network to function
🔘 C) Public Wi-Fi networks increase device power consumption
🔘 D) Public Wi-Fi speeds are too slow for IoT devices

✅ Correct Answer: A) Public Wi-Fi networks are susceptible to MITM (Man-in-the-Middle) attacks
📝 Explanation: Public Wi-Fi networks lack proper encryption, making them vulnerable to eavesdropping and MITM attacks that can expose smart home credentials.

145. How can attackers exploit smart home geofencing features?

🔘 A) By spoofing GPS signals to trick the system
🔘 B) By tracking user movement patterns
🔘 C) By triggering automated actions without authorization
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Attackers can manipulate GPS signals, track user locations, or trigger smart home automations for malicious purposes.

146. What is the primary function of a network Intrusion Detection System (IDS) in a smart home?

🔘 A) It detects and alerts about suspicious network activity
🔘 B) It speeds up smart device communication
🔘 C) It increases Wi-Fi coverage
🔘 D) It automatically updates firmware

✅ Correct Answer: A) It detects and alerts about suspicious network activity
📝 Explanation: A network IDS monitors traffic and detects unauthorized access attempts, malware, and hacking attempts.

147. Why is a smart home device with a hardcoded backdoor a security risk?

🔘 A) Attackers can use it to gain persistent access to the device
🔘 B) It consumes excessive bandwidth
🔘 C) It prevents the device from connecting to secure networks
🔘 D) It slows down firmware updates

✅ Correct Answer: A) Attackers can use it to gain persistent access to the device
📝 Explanation: Backdoors in IoT devices allow hackers to maintain control over the device even if passwords are changed.

148. How can attackers use AI-powered malware to compromise smart homes?

🔘 A) By analyzing user behavior to predict security weaknesses
🔘 B) By automating brute-force attacks against smart locks
🔘 C) By evading traditional security mechanisms
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: AI-powered malware can learn and adapt to exploit vulnerabilities, making it a powerful threat against smart home security.

149. How does restricting IoT devices to a separate VLAN improve security?

🔘 A) It isolates smart home devices from sensitive data networks
🔘 B) It prevents unauthorized devices from accessing IoT devices
🔘 C) It reduces the attack surface of a compromised device
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: A separate VLAN for IoT devices ensures that if a smart device is hacked, the attacker cannot access critical networks or sensitive data.

150. What is the primary reason for using multi-factor authentication (MFA) in smart home accounts?

🔘 A) It prevents unauthorized access even if credentials are stolen
🔘 B) It makes logging in faster
🔘 C) It reduces network congestion
🔘 D) It improves battery life

✅ Correct Answer: A) It prevents unauthorized access even if credentials are stolen
📝 Explanation: MFA adds an extra layer of security, ensuring that even if an attacker steals login credentials, they still need another factor (e.g., OTP, biometrics) to access the account.

151. What is a primary security concern with smart home door locks that use cloud-based access control?

🔘 A) They require frequent battery replacements
🔘 B) They can be disabled remotely if the cloud service is compromised
🔘 C) They do not support multiple users
🔘 D) They slow down network performance

✅ Correct Answer: B) They can be disabled remotely if the cloud service is compromised
📝 Explanation: Cloud-based smart locks rely on external services, meaning a cloud breach or outage can allow attackers to lock out or gain access remotely.

152. How can attackers exploit QR code-based authentication in smart home devices?

🔘 A) By replacing QR codes with malicious ones
🔘 B) By using QR code spoofing to redirect authentication requests
🔘 C) By scanning QR codes with malware-infected apps
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Attackers can replace or manipulate QR codes to redirect authentication requests, leading to unauthorized access.

153. What is a recommended security measure for smart home NAS (Network Attached Storage) devices?

🔘 A) Enabling strong encryption for stored data
🔘 B) Disabling remote access unless necessary
🔘 C) Using a firewall to restrict unauthorized access
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Smart home NAS devices must be encrypted, secured behind a firewall, and have remote access disabled to prevent unauthorized data exposure.

154. What is a common risk associated with using smart home facial recognition systems?

🔘 A) They can be fooled by high-resolution images or deepfake technology
🔘 B) They require frequent reconfiguration
🔘 C) They consume too much power
🔘 D) They cannot differentiate between users

✅ Correct Answer: A) They can be fooled by high-resolution images or deepfake technology
📝 Explanation: Attackers can use photos, videos, or AI-generated deepfakes to trick facial recognition systems into granting unauthorized access.

155. Why should smart home devices be assigned static IP addresses within a home network?

🔘 A) To improve network speed
🔘 B) To reduce the risk of network spoofing attacks
🔘 C) To increase battery efficiency
🔘 D) To make devices invisible to hackers

✅ Correct Answer: B) To reduce the risk of network spoofing attacks
📝 Explanation: Assigning static IPs helps mitigate spoofing risks and makes it easier to monitor and secure smart home devices.

156. How can an attacker exploit Bluetooth pairing flaws in smart locks?

🔘 A) By eavesdropping on unencrypted Bluetooth signals
🔘 B) By performing a replay attack on the pairing process
🔘 C) By brute-forcing weak Bluetooth pairing codes
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Weak Bluetooth pairing mechanisms can be exploited using eavesdropping, replay attacks, or brute-force techniques to gain control of smart locks.

157. What is a common security issue with using smart home devices in rental properties?

🔘 A) Previous tenants may still have access
🔘 B) Smart devices may not support encryption
🔘 C) Devices can only be reset by manufacturers
🔘 D) They cannot be connected to home Wi-Fi

✅ Correct Answer: A) Previous tenants may still have access
📝 Explanation: If previous tenants still have access to smart home systems, they may be able to control devices remotely unless proper resets are performed.

158. What type of attack exploits a weak SSID name and password on smart home Wi-Fi networks?

🔘 A) Wi-Fi Deauthentication Attack
🔘 B) Dictionary Attack
🔘 C) Evil Twin Attack
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Weak Wi-Fi security settings make networks vulnerable to deauthentication, dictionary attacks, and fake hotspot (Evil Twin) exploits.

159. What is a security risk of using third-party automation scripts for smart home devices?

🔘 A) Scripts may contain malicious code
🔘 B) Scripts may expose API keys and credentials
🔘 C) Scripts may not receive regular security updates
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Untrusted third-party scripts can introduce vulnerabilities, data exposure, and security loopholes in smart home systems.

160. How can an attacker use a hacked smart home thermostat for data exfiltration?

🔘 A) By encoding stolen data into temperature logs
🔘 B) By manipulating temperature settings to send signals
🔘 C) By using the thermostat as a relay for exfiltrating sensitive data
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Compromised thermostats can be used as covert communication channels for exfiltrating data via encoded temperature changes or logs.

161. What security measure should be implemented for smart security cameras connected to cloud services?

🔘 A) Enabling two-factor authentication (2FA)
🔘 B) Using strong, unique passwords
🔘 C) Restricting camera access to private networks
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Smart security cameras must have 2FA, strong authentication, and private network restrictions to prevent unauthorized access.

162. How can attackers exploit smart home doorbells with video streaming?

🔘 A) By intercepting unencrypted video feeds
🔘 B) By manipulating stored footage
🔘 C) By disabling the camera remotely
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Attackers can eavesdrop on video feeds, modify footage, or disable cameras if proper security controls aren’t implemented.

163. What risk is associated with using IoT-enabled smart home vacuums?

🔘 A) They can map and store floor plans of a home
🔘 B) They can record audio conversations
🔘 C) They can be remotely hijacked for spying
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Smart vacuums can be exploited to map homes, record conversations, and be remotely controlled for surveillance.

164. What is a recommended way to secure smart home lighting systems?

🔘 A) Disable remote access unless necessary
🔘 B) Use secure, encrypted communication protocols
🔘 C) Regularly update firmware and software
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Restricting remote access, using encryption, and updating firmware helps secure smart lighting systems from cyber threats.

165. Why is DNS filtering useful for smart home security?

🔘 A) It blocks access to malicious domains
🔘 B) It increases network speed
🔘 C) It prevents device overheating
🔘 D) It improves battery life

✅ Correct Answer: A) It blocks access to malicious domains
📝 Explanation: DNS filtering prevents smart home devices from connecting to known malicious servers, reducing exposure to cyber threats.

166. How can attackers exploit smart home irrigation systems?

🔘 A) By remotely flooding an area to cause water damage
🔘 B) By depleting water resources through unauthorized activation
🔘 C) By using it as a point of entry into the smart home network
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Smart irrigation systems can be hacked to waste water, damage landscapes, or serve as a pivot point for network intrusions.

167. What is a major risk of using weak encryption on smart home surveillance footage?

🔘 A) It increases storage space
🔘 B) It allows attackers to intercept and view private video feeds
🔘 C) It prevents firmware updates
🔘 D) It improves streaming speed

✅ Correct Answer: B) It allows attackers to intercept and view private video feeds
📝 Explanation: Weak encryption makes it easier for hackers to intercept surveillance footage, leading to privacy breaches and potential stalking risks.

168. What is a security concern when using smart home intercom systems?

🔘 A) Attackers can remotely listen to conversations
🔘 B) Unauthorized individuals can gain access through voice spoofing
🔘 C) Unpatched vulnerabilities may allow remote control
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Smart intercoms can be exploited through eavesdropping, voice spoofing, and remote hacking if not secured properly.

169. What is the risk of using smart locks with publicly exposed APIs?

🔘 A) Attackers can send commands to unlock doors remotely
🔘 B) APIs can leak sensitive data, such as access logs
🔘 C) Poorly secured APIs can be brute-forced to gain control
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Exposed APIs allow hackers to unlock doors, steal data, or execute unauthorized commands on smart locks.

170. How does implementing MAC address filtering improve smart home security?

🔘 A) It restricts network access to only approved devices
🔘 B) It speeds up the internet connection
🔘 C) It extends battery life for IoT devices
🔘 D) It prevents firmware tampering

✅ Correct Answer: A) It restricts network access to only approved devices
📝 Explanation: MAC address filtering ensures that only authorized devices can connect to the smart home network.

171. What is a common mistake users make when setting up smart home cameras?

🔘 A) Keeping default usernames and passwords
🔘 B) Disabling two-factor authentication (2FA)
🔘 C) Allowing unrestricted cloud access
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Many users fail to change default credentials, enable 2FA, or limit cloud access, leaving smart cameras vulnerable to attacks.

172. How can attackers exploit smart power strips?

🔘 A) By remotely turning off connected devices
🔘 B) By using them as entry points into the home network
🔘 C) By overloading circuits and causing damage
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Compromised smart power strips can lead to power disruptions, network intrusions, or even electrical hazards.

173. Why should smart home devices be placed on a separate network (VLAN)?

🔘 A) To isolate them from critical personal data and work devices
🔘 B) To improve gaming performance
🔘 C) To reduce electricity consumption
🔘 D) To prevent overheating

✅ Correct Answer: A) To isolate them from critical personal data and work devices
📝 Explanation: Segmenting IoT devices on a separate VLAN prevents attackers from moving laterally across the network if a smart device is compromised.

174. What type of attack can disable smart home alarms?

🔘 A) Jamming attacks
🔘 B) Firmware rollback attacks
🔘 C) API injection attacks
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Attackers can jam alarm signals, roll back firmware to exploit old vulnerabilities, or use API-based exploits to disable alarms.

175. What security risk does enabling “remote access” on smart home devices introduce?

🔘 A) It increases vulnerability to unauthorized access attempts
🔘 B) It allows brute-force attacks on login credentials
🔘 C) Attackers can remotely control smart devices if credentials are compromised
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Remote access, if poorly secured, provides an easy target for attackers to gain control over smart home systems.

176. How can attackers manipulate smart home occupancy sensors?

🔘 A) By using infrared jamming to prevent detection
🔘 B) By injecting false signals into sensor communication
🔘 C) By spoofing presence data to trick security systems
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Attackers can manipulate occupancy sensors using infrared jammers, false signals, or spoofing techniques to bypass security measures.

177. How can smart home speakers be exploited by cybercriminals?

🔘 A) By using malware to listen in on conversations
🔘 B) By hijacking voice assistants to control smart devices
🔘 C) By sending phishing links through voice notifications
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Compromised smart speakers can be used for eavesdropping, issuing unauthorized voice commands, or distributing phishing links.

178. What is the biggest risk of using outdated smart home firmware?

🔘 A) It makes devices slower
🔘 B) It exposes devices to known security vulnerabilities
🔘 C) It increases network traffic
🔘 D) It reduces storage capacity

✅ Correct Answer: B) It exposes devices to known security vulnerabilities
📝 Explanation: Outdated firmware lacks security patches, making devices easy targets for hackers using known exploits.

179. How can attackers use smart doorbells for surveillance?

🔘 A) By gaining unauthorized remote access to video feeds
🔘 B) By modifying stored footage
🔘 C) By activating motion detection to gather information on residents
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Hacked smart doorbells can be used for surveillance, spying on users, or manipulating security footage.

180. How does disabling voice purchasing on smart assistants improve security?

🔘 A) It prevents unauthorized purchases by attackers or children
🔘 B) It increases device processing speed
🔘 C) It reduces voice assistant activation errors
🔘 D) It improves device battery life

✅ Correct Answer: A) It prevents unauthorized purchases by attackers or children
📝 Explanation: Attackers or unauthorized users can use voice commands to make purchases, which is why disabling voice purchasing is a recommended security practice.

181. How can attackers exploit smart home voice assistants for unauthorized access?

🔘 A) By issuing commands through open windows or doors (voice injection)
🔘 B) By using AI-generated voice impersonation
🔘 C) By hijacking linked third-party services
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Attackers can use voice injection, AI-generated voice replication, or third-party service hijacking to control smart home assistants.

182. What is a key security risk of smart home guest networks?

🔘 A) Guests can access sensitive devices if permissions are not restricted
🔘 B) Guest networks consume additional bandwidth
🔘 C) Guest networks cannot use WPA3 encryption
🔘 D) They reduce the Wi-Fi range

✅ Correct Answer: A) Guests can access sensitive devices if permissions are not restricted
📝 Explanation: If guest network permissions are not properly set, unauthorized users may gain access to smart home devices.

183. What is a common vulnerability in smart home alarm systems?

🔘 A) Jamming attacks on wireless signals
🔘 B) Default passwords left unchanged
🔘 C) Unpatched software vulnerabilities
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Jamming attacks, weak credentials, and unpatched firmware make smart home alarm systems vulnerable to attacks.

184. How can attackers compromise a smart home backup power supply?

🔘 A) By overloading the circuit through malware
🔘 B) By remotely triggering a shutdown if it has network access
🔘 C) By manipulating firmware to cause failure
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Attackers can manipulate smart power supplies to disable backup systems, causing security failures during power outages.

185. What is the risk of using a single account for all smart home devices?

🔘 A) If compromised, all devices are accessible to attackers
🔘 B) It prevents setting unique permissions per device
🔘 C) It increases the attack surface for cybercriminals
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Using a single account for all smart devices increases the risk of total compromise if credentials are stolen.

186. Why should smart home devices be disabled when not in use?

🔘 A) To reduce exposure to cyberattacks
🔘 B) To lower energy consumption
🔘 C) To prevent unauthorized remote activation
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Disabling unused smart home devices helps reduce their attack surface, save energy, and prevent unauthorized access.

187. How can attackers exploit motion detection features in smart home security cameras?

🔘 A) By remotely disabling motion detection
🔘 B) By sending false motion alerts to distract users
🔘 C) By using infrared light to blind motion sensors
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Attackers can disable, manipulate, or bypass motion detection in smart cameras to avoid detection.

188. What security risk does an improperly configured smart home firewall present?

🔘 A) It may allow unauthorized inbound and outbound traffic
🔘 B) It may block legitimate device communication
🔘 C) It can be exploited if weak default settings are used
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: A poorly configured firewall can allow unauthorized access, disrupt smart home device communication, or be exploited through weak configurations.

189. What is a risk of using Bluetooth-based smart home automation?

🔘 A) Bluetooth signals can be intercepted by attackers nearby
🔘 B) Devices may remain discoverable, making them easier to attack
🔘 C) Weak Bluetooth encryption can be bypassed
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Bluetooth smart home devices are vulnerable to signal interception, weak encryption, and discoverability exploits if not properly secured.

190. What is a primary security benefit of using a dedicated IoT network for smart home devices?

🔘 A) It isolates IoT devices from critical home systems
🔘 B) It improves internet speed for other devices
🔘 C) It enhances battery life for smart devices
🔘 D) It prevents overheating

✅ Correct Answer: A) It isolates IoT devices from critical home systems
📝 Explanation: A dedicated IoT network isolates smart home devices from critical systems, preventing attackers from accessing personal or financial data if an IoT device is compromised.

191. How can attackers exploit smart home lighting systems?

🔘 A) By remotely turning lights on/off to create confusion
🔘 B) By using smart bulbs to launch botnet attacks
🔘 C) By exploiting vulnerabilities in connected apps to access the network
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Smart lighting systems can be exploited to cause disruption, be part of a botnet, or act as an entry point into a home network if not secured properly.

192. What is a major risk of using smart home devices that rely on open Wi-Fi networks?

🔘 A) Anyone nearby can access and control them
🔘 B) They can be easily hijacked via man-in-the-middle attacks
🔘 C) They expose user credentials to attackers
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Open Wi-Fi networks lack encryption, allowing attackers to easily intercept traffic, hijack devices, and steal credentials.

193. How can attackers exploit smart locks with RFID authentication?

🔘 A) By cloning RFID access cards using skimming devices
🔘 B) By using relay attacks to extend RFID signals
🔘 C) By performing brute-force attacks on RFID authentication
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: RFID authentication can be bypassed using cloning, relay attacks, or brute-force methods if security measures are weak.

194. What security risk does a compromised smart home thermostat pose?

🔘 A) It can reveal when homeowners are away
🔘 B) It can be manipulated to cause heating or cooling failures
🔘 C) It can serve as an entry point for network attacks
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: A hacked smart thermostat can leak occupancy patterns, cause physical damage, or be used for lateral attacks on the network.

195. How can attackers exploit vulnerabilities in smart home garage door openers?

🔘 A) By using replay attacks to capture and resend access codes
🔘 B) By disabling security alerts and notifications
🔘 C) By remotely brute-forcing authentication credentials
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Replay attacks, brute-force attempts, and disabling alerts are common methods used to compromise smart garage door openers.

196. Why is using default credentials on smart home routers a security risk?

🔘 A) Attackers can use default usernames/passwords to gain unauthorized access
🔘 B) Default credentials are often available on the internet
🔘 C) It makes brute-force attacks easier
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Default credentials are commonly known and used in automated attacks, allowing attackers to easily compromise smart home routers.

197. What is an effective way to prevent unauthorized control of smart home blinds or curtains?

🔘 A) Enabling secure authentication and encryption
🔘 B) Using a dedicated IoT network
🔘 C) Regularly updating firmware to patch security vulnerabilities
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Smart blinds or curtains can be hacked if authentication, encryption, and updates are not properly implemented.

198. How can attackers exploit smart TVs in a home network?

🔘 A) By hijacking the microphone and camera for spying
🔘 B) By using them as a pivot point for launching malware
🔘 C) By displaying fake messages or phishing screens
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Smart TVs can be used for surveillance, malware distribution, or phishing attacks if compromised.

199. What is a recommended security measure for smart home baby monitors?

🔘 A) Changing default login credentials
🔘 B) Using strong encryption for video/audio transmission
🔘 C) Disabling remote access when not in use
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Hacked baby monitors can be used to spy on families, so proper authentication, encryption, and limited remote access are critical for security.

200. How can smart home water leak sensors be exploited by attackers?

🔘 A) By sending false alerts to cause panic
🔘 B) By disabling alerts remotely
🔘 C) By triggering automated water shutoff systems maliciously
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Hacked water leak sensors can be used to cause unnecessary alarms, disable real alerts, or manipulate water control systems.

201. Why is disabling UPnP (Universal Plug and Play) recommended for smart home security?

🔘 A) UPnP automatically opens network ports, increasing exposure to attacks
🔘 B) UPnP allows devices to be accessed remotely without authentication
🔘 C) UPnP can be exploited by malware to bypass firewalls
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: UPnP weakens security by automatically opening ports that can be abused for remote exploitation.

202. How can attackers use a compromised smart mirror?

🔘 A) By activating the camera for unauthorized surveillance
🔘 B) By injecting malicious advertisements or phishing pages
🔘 C) By exploiting insecure network connections
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Smart mirrors with built-in cameras, web access, and internet connectivity can be compromised for spying, malware injection, or phishing.

203. What security risk does integrating smart home devices with voice-activated banking services pose?

🔘 A) Unauthorized users can initiate financial transactions
🔘 B) Attackers can use voice spoofing to bypass authentication
🔘 C) Poorly secured voice assistants may store sensitive banking information
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Smart home devices linked to banking services are vulnerable to voice spoofing, unauthorized transactions, and data leaks.

204. What is the security risk of using cloud-based storage for smart home footage?

🔘 A) If the cloud service is hacked, stored video footage may be leaked
🔘 B) Video footage can be accessed by unauthorized third parties
🔘 C) Weak encryption may expose sensitive recordings
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Cloud-based smart home footage is at risk of hacks, unauthorized access, and weak encryption flaws if not properly secured.

205. How does enabling logging and audit trails improve smart home security?

🔘 A) It helps track unauthorized access attempts
🔘 B) It provides insights into suspicious activities
🔘 C) It allows users to monitor changes made to smart devices
🔘 D) All of the above

✅ Correct Answer: D) All of the above
📝 Explanation: Logging and audit trails help detect unauthorized access, track suspicious actions, and ensure accountability in smart home security.

Smart Home Security – Securing Smart Locks, Cameras, and Assistants