CERTNEXUS-ITS-110-2025 practice question 23 of 35
An IoT developer wants to ensure that data collected from a remotely deployed power station monitoring system is transferred securely to the cloud. Which of the following technologies should the developer consider?
Full set: 100 questionsTransport Layer Security (TLS) is a cryptographic protocol designed to provide secure communication over a computer network. For an IoT system, TLS encrypts the data channel between the remote device (power station monitor) and the cloud server. This ensures confidentiality, preventing eavesdropping, and integrity, preventing data tampering during transit. It is the industry-standard method for securing network connections for protocols like HTTPS and secure MQTT, making it the most appropriate choice for the developer's requirement.
A. Secure/Multipurpose Internet Mail Extensions (S/MIME): This is a standard for encrypting and signing email messages, not for securing a general-purpose data transport channel between an IoT device and the cloud.
B. Message-digest 5 (MD5): This is an obsolete hashing algorithm used to verify data integrity, not to provide confidentiality or secure the communication channel itself. It does not encrypt data.
C. Blowfish: This is a symmetric-key block cipher, which is an encryption algorithm. While a protocol like TLS might use such a cipher, Blowfish itself is not a complete protocol for securing data transfer.
1. National Institute of Standards and Technology (NIST). (2020). NISTIR 8259A: IoT Device Cybersecurity Capability Core Baseline. Section 4.2, "Data Protection," states, "The IoT device protects the data it stores and transmits from unauthorized access and modification... Data in transit is protected using strong, validated, and approved cryptographic mechanisms (e.g., TLS 1.2 or higher)."
2. Rescorla, E. (2018). RFC 8446: The Transport Layer Security (TLS) Protocol Version 1.3. Internet Engineering Task Force (IETF). The abstract states, "TLS provides a secure channel between two communicating peers; the protocol is designed to prevent eavesdropping, tampering, and message forgery."
3. AWS IoT Core Developer Guide. (n.d.). Transport security. Amazon Web Services. The documentation specifies, "Transport Layer Security (TLS) is a protocol for encrypting communication. In AWS IoT, all communication is encrypted using TLS." This is representative of standard cloud vendor requirements for IoT.
4. Hillar, G. C. (2015). Internet of Things with Python. Chapter 7, "Making Things Secure." This chapter, in a publication from a reputable technical publisher often used in academic settings, explains that protocols like MQTT must be layered over TLS to secure data in transit.
Keep practicing
Take the free CERTNEXUS-ITS-110-2025 practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other CERTNEXUS-ITS-110-2025 practice questions
- Question 1A hacker is able to eavesdrop on administrative sessions to remote IoT sensors. Which of …
- Question 2Accompany collects and stores sensitive data from thousands of IoT devices. The company's…
- Question 3You work for a multi-national IoT device vendor. Your European customers are complaining …
- Question 4Which of the following tools or techniques is used by software developers to maintain cod…
- Question 5An IoT system administrator discovers that unauthorized users are able to log onto and ac…
- Question 6A developer is coding for an IoT product in the healthcare sector. What special care must…
