ITS-110 試験問題を無料オンラインアクセス

An IoT systems integrator has a very old IoT gateway that doesn't offer many security features besides viewing a system configuration page via browser over HTTPS. The systems integrator can't get their modern browser to bring up the page due to a cipher suite mismatch. Which of the following must the integrator perform before the configuration page can be viewed?

• A.Downgrade the browser, as modern browsers have continued allowing connections to hosts that use only outdated cipher suites.
• B.Upgrade the browser, as older browsers have stopped allowing connections to hosts that use only outdated cipher suites.
• C.Upgrade the browser, as modern browsers have stopped allowing connections to hosts that use only outdated cipher suites.
• D.Downgrade the browser, as modern browsers have stopped allowing connections to hosts that use only outdated cipher suites.

An IoT systems administrator needs to be able to detect packet injection attacks. Which of the follow methods or technologies is the administrator most likely to implement?

• A.Layer 2 Tunneling Protocol (L2TP)
• B.Internet Protocol Security (IPSec) with Encapsulating Security Payload (ESP)
• C.Point-to-Point Tunneling Protocol (PPTP)
• D.Internet Protocol Security (IPSec) with Authentication Headers (AH)

An IoT system administrator discovers that hackers are using rainbow tables to compromise user accounts on their cloud management portal. What should the administrator do in order to mitigate this risk?

• A.Implement URL filtering
• B.Implement certificates on all login pages
• C.Implement granular role-based access
• D.Implement robust password policies

An OT security practitioner wants to implement two-factor authentication (2FA). Which of the following is the least secure method to use for implementation?

• A.Out-of-band authentication (OOBA)
• B.2FA over Short Message Service (SMS)
• C.Authenticator Apps for smartphones
• D.Fast Identity Online (FIDO) Universal 2nd Factor (U2F) USB key

The network administrator for an organization has read several recent articles stating that replay attacks are on the rise. Which of the following secure protocols could the administrator implement to prevent replay attacks via remote workers' VPNs? (Choose three.)

• A.Layer 2 Tunneling Protocol (L2TP)
• B.Challenge Handshake Authentication Protocol (CHAP)
• C.Internet Protocol Security (IPSec)
• D.Password Authentication Protocol (PAP)
• E.Simple Network Management Protocol (SNMP)
• F.Enhanced Interior Gateway Routing Protocol (EIGRP)
• G.Interior Gateway Routing Protocol (IGRP)