ITS-110

Review 100 ITS-110 practice questions with answer explanations and community insights.

Question 1

Which of the following attacks utilizes Media Access Control (MAC) address spoofing?

  1. Network Address Translation (NAT)
  2. Man-in-the-middle (MITM)
  3. Network device fuzzing
  4. Unsecured network ports

Question 2

In order to successfully perform a man-in-the-middle (MITM) attack against a secure website, which of the following could be true?

  1. Client to server traffic must use Hypertext Transmission Protocol (HTTP)
  2. The server must be vulnerable to malformed Uniform Resource Locator (URL) injection
  3. The server must be using a deprecated version of Transport Layer Security (TLS)
  4. The web server's X.509 certificate must be compromised

Question 3

An IoT security administrator wishes to mitigate the risk of falling victim to Distributed Denial of Service (DDoS) attacks. Which of the following mitigation strategies should the security administrator implement? (Choose two.)

  1. Block all inbound packets with an internal source IP address
  2. Block all inbound packets originating from service ports
  3. Enable unused Transmission Control Protocol (TCP) service ports in order to create a honeypot
  4. Block the use of Transmission Control Protocol (TCP) and User Datagram Protocol (UDP) through his perimeter firewall
  5. Require the use of X.509 digital certificates for all incoming requests

Question 4

An IoT security administrator is concerned about an external attacker using the internal device management local area network (LAN) to compromise his IoT devices. Which of the following countermeasures should the security administrator implement? (Choose three.)

  1. Require the use of Password Authentication Protocol (PAP)
  2. Create a separate management virtual LAN (VLAN)
  3. Ensure that all IoT management servers are running antivirus software
  4. Implement 802.1X for authentication
  5. Ensure that the Time To Live (TTL) flag for outgoing packets is set to 1
  6. Only allow outbound traffic from the management LAN
  7. Ensure that all administrators access the management server at specific times

Question 5

Which of the following attacks is a reflected Distributed Denial of Service (DDoS) attack?

  1. Teardrop
  2. Ping of Death
  3. SYN flood
  4. Smurf
We are moving to a new platform

CertificationTest is being migrated. Some pages may be slow or briefly unavailable; everything will be back to normal within a few hours. If you run into any issue, email support@certificationtest.net.