CertNexus Exam ITS-110 Topic 4 Question 40 Discussion

Actual exam question for CertNexus's ITS-110 exam

Question #: 40
Topic #: 4

An IoT developer has endpoints that are shipped to users in the field. Which of the following best practices must be implemented for using default passwords after delivery?

AImplement two-factor authentication (2FA)

BForce a password change upon initial login

CApply granular role-based access

DProtect against account enumeration

Show Suggested Answer

Suggested Answer: B

by Annalee at Aug 24, 2024, 05:55 AM

Limited Time Offer

25%

Off

Get Premium ITS-110 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Angelyn

9 months ago

Haha, I bet some developers would just write 'password' as the default and call it a day. But B is the right choice, for sure.

upvoted 0 times

Kimbery

8 months ago

Agreed, it's a basic security measure to protect the endpoints.

upvoted 0 times

...

Pearlene

8 months ago

Definitely, but forcing a password change is a must.

upvoted 0 times

...

Cammy

8 months ago

Haha, some developers are lazy with default passwords.

upvoted 0 times

...

Minna

9 months ago

D) Protect against account enumeration is also important, but B is the clear winner here.

upvoted 0 times

...

Galen

9 months ago

Definitely, B is the way to go. I can't believe people still use default passwords these days. It's just asking for trouble!

upvoted 0 times

Leoma

8 months ago

D) Protect against account enumeration

upvoted 0 times

...

Christene

8 months ago

I agree, default passwords are a huge security risk.

upvoted 0 times

...

Laurene

8 months ago

C) Apply granular role-based access

upvoted 0 times

...

Gladys

8 months ago

B) Force a password change upon initial login

upvoted 0 times

...

Nelida

9 months ago

I think applying granular role-based access can help control who has access to the endpoints.

upvoted 0 times

...

Benedict

9 months ago

I believe implementing two-factor authentication (2FA) would also add an extra layer of security.

upvoted 0 times

...

Dorthy

10 months ago

B) Force a password change upon initial login seems like the best way to ensure default passwords are not used long-term.

upvoted 0 times

Ramonita

9 months ago

User 2

upvoted 0 times

...

Timothy

9 months ago

User 1

upvoted 0 times

...

Alyssa

10 months ago

I agree with Lacresha. It's important to ensure default passwords are changed for security.

upvoted 0 times

...

Lacresha

10 months ago

I think we should force a password change upon initial login.

upvoted 0 times

...