ECSA v10: EC-Council Certified Security Analyst v10

By ECCouncil · Question Mode

QuestionQ105

VerifiedWireless Penetration Testing Methodology

Jacob is a penetration tester at TechSoft Inc., based in Singapore. The company assigned him to conduct a penetration test of the IoT devices connected to the corporate network. As part of this process, he captured network traffic from the devices, their mobile applications, and cloud connections to determine whether any critical data was transmitted in plain text. He also checked whether SSL/TLS protocols were properly updated and implemented.

Which IoT security issue is Jacob dealing with?

Explanation

Transport encryption protects data while it travels between IoT devices, mobile applications, and cloud services. Plaintext transmission or outdated or improperly implemented SSL/TLS exposes data in transit, which is a lack of transport encryption. NIST identifies secure transmission as protecting IoT data sent to and from a device through cryptographic mechanisms.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!