CertNexus Exam ITS-110 Topic 1 Question 27 Discussion

Actual exam question for CertNexus's ITS-110 exam

Question #: 27
Topic #: 1

A hacker was able to generate a trusted certificate that spoofs an IoT-enabled security camera's management portal. Which of the following is the most likely cause of this exploit?

ABootloader code is stored in unsecure flash memory

BThe portal's certificate is stored in unsecure flash memory

CX.509 private keys are stored in unsecure flash memory

DFirmware is loaded from flash using unsecure object references

Show Suggested Answer

Suggested Answer: C

by Lashandra at Mar 07, 2024, 04:22 PM

Limited Time Offer

25%

Off

Get Premium ITS-110 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Annabelle

9 months ago

I think the portal's certificate being stored in unsecure flash memory could be the cause. If that's compromised, the hacker could spoof the management portal.

upvoted 0 times

...

Herminia

9 months ago

That's a good point, Madonna. The bootloader code being compromised could also lead to generating a trusted certificate.

upvoted 0 times

...

Madonna

9 months ago

But what about the bootloader code stored in unsecure flash memory? Could that also be a potential cause?

upvoted 0 times

...

Laila

10 months ago

I agree with Herminia. If the private keys are compromised, it could lead to spoofing the certificate.

upvoted 0 times

...

Herminia

10 months ago

I think the most likely cause is X.509 private keys stored in unsecure flash memory.

upvoted 0 times

...

Delisa

10 months ago

I'm leaning towards the firmware being loaded from flash using unsecure object references as the reason for the trusted certificate spoofing.

upvoted 0 times

...

Izetta

10 months ago

Actually, I think the X.509 private keys being stored in unsecure flash memory could have been the root cause.

upvoted 0 times

...

Luke

10 months ago

I disagree, I believe the portal's certificate being stored in unsecure flash memory is the most likely cause of this exploit.

upvoted 0 times

...

Vincent

11 months ago

I think the hacker was able to generate a trusted certificate because the bootloader code is stored in unsecure flash memory.

upvoted 0 times

...