Exam 312-50v12 topic 1 question 194 discussion

Actual exam question from ECCouncil's 312-50v12

Question #: 194
Topic #: 1

As a security consultant, you are advising a startup that is developing an IoT device for home security. The device communicates with a mobile app, allowing homeowners to monitor their homes in real time. The CEO is concerned about potential Man-in-the-Middle (MitM) attacks that could allow an attacker to intercept and manipulate the device's communication. Which of the following solutions would best protect against such attacks?

A. Use CAPTCHA on the mobile app's login screen.
B. Implement SSL/TLS encryption for data transmission between the IoT device and the mobile app.
C. Limit the range of the IoT device's wireless signals.
D. Frequently change the IoT device's IP address.

Show Suggested Answer

Suggested Answer: B 🗳️

by DarioReymag at Feb. 6, 2024, 10:38 p.m.

Comments

Submit Cancel

Mos3ab

6 months ago

Selected Answer: B

SSL/TLS encryption secures communication by encrypting data, preventing interception and tampering by attackers, and protecting against Man-in-the-Middle (MitM) attacks. A. CAPTCHA: Protects against bots, but doesn't address the risk of MitM attacks. C. Limiting wireless signal range: Reduces exposure but doesn't secure the communication. D. Changing IP address: Doesn't prevent interception of unencrypted data

upvoted 2 times

...

prasoonmk

1 year, 1 month ago

B. Implement SSL/TLS encryption for data transmission between the IoT device and the mobile app. To protect against Man-in-the-Middle (MitM) attacks, the most effective solution among the ones listed is to B. Implement SSL/TLS encryption for data transmission between the IoT device and the mobile app. This type of encryption ensures that even if an attacker intercepts the communication, they would not be able to decipher the contents, thereby preventing them from manipulating the messages. While CAPTCHAs are useful for verifying that a user is a human, they do not encrypt data transmission. Limiting the range of the IoT device may reduce the attack surface but does not protect data that is transmitted outside that range. Changing the IoT device's IP address might obscure the device from a potential attacker but does not protect the actual data being transmitted.

upvoted 1 times

...