Certified Internet of Things Security Practitioner

Here you have the best CertNexus ITS-110 practice exam questions

You have 100 total questions to study from
Each page has 5 questions, making a total of 20 pages
You can navigate through the pages using the buttons at the bottom
This questions were last updated on December 31, 2025
This site is not affiliated with or endorsed by CertNexus.

Question 1 of 100

Which of the following attacks utilizes Media Access Control (MAC) address spoofing?

Network Address Translation (NAT)

Man-in-the-middle (MITM)

Network device fuzzing

Unsecured network ports

Correct Answer: B

Question 2 of 100

In order to successfully perform a man-in-the-middle (MITM) attack against a secure website, which of the following could be true?

Client to server traffic must use Hypertext Transmission Protocol (HTTP)

The server must be vulnerable to malformed Uniform Resource Locator (URL) injection

The server must be using a deprecated version of Transport Layer Security (TLS)

The web server's X.509 certificate must be compromised

Correct Answer: C

Question 3 of 100

An IoT security administrator wishes to mitigate the risk of falling victim to Distributed Denial of Service (DDoS) attacks. Which of the following mitigation strategies should the security administrator implement? (Choose two.)

Block all inbound packets with an internal source IP address

Block all inbound packets originating from service ports

Enable unused Transmission Control Protocol (TCP) service ports in order to create a honeypot

Block the use of Transmission Control Protocol (TCP) and User Datagram Protocol (UDP) through his perimeter firewall

Require the use of X.509 digital certificates for all incoming requests

Correct Answer: D, E

Question 4 of 100

An IoT security administrator is concerned about an external attacker using the internal device management local area network (LAN) to compromise his IoT devices. Which of the following countermeasures should the security administrator implement? (Choose three.)

Require the use of Password Authentication Protocol (PAP)

Create a separate management virtual LAN (VLAN)

Ensure that all IoT management servers are running antivirus software

Implement 802.1X for authentication

Ensure that the Time To Live (TTL) flag for outgoing packets is set to 1

Only allow outbound traffic from the management LAN

Ensure that all administrators access the management server at specific times

Correct Answer: B, D, G

Question 5 of 100

Which of the following attacks is a reflected Distributed Denial of Service (DDoS) attack?

Teardrop

Ping of Death

SYN flood

Smurf

Correct Answer: C