Unit 4: IoT Protocols and Security - Practice Quiz

ECE128 — Introduction To Iot Networking Protocols 60 Questions
0 Correct 0 Wrong 60 Left
0/60

1 Why are communication protocols required in IoT networks?

Requirement of protocols Easy
A. To replace all physical devices
B. To increase the size of sensors
C. To remove the need for networks
D. To define rules for exchanging data

2 What is a primary benefit of standard protocols in IoT?

Requirement of protocols Easy
A. Isolation between different devices
B. Interoperability between different devices
C. Unlimited power for every device
D. Elimination of all security risks

3 Which protocol feature is especially important for battery-powered IoT devices?

Requirement of protocols Easy
A. Manual data processing
B. Low energy consumption
C. High printing quality
D. Large display support

4 Which protocol is commonly used for lightweight publish-subscribe messaging in IoT?

Types of protocols Easy
A. HTTP
B. FTP
C. SMTP
D. MQTT

5 Which IoT application protocol commonly follows a request-response model and is designed for constrained devices?

Types of protocols Easy
A. Zigbee
B. MQTT
C. CoAP
D. Bluetooth

6 Which protocol provides addressing and routing across IP networks?

Types of protocols Easy
A. Bluetooth
B. IPv6
C. CoAP
D. MQTT

7 What does a cyber-physical system combine?

Cyber-physical systems Easy
A. Web pages and advertisements
B. Passwords and account names
C. Computing and physical processes
D. Documents and printed records

8 Which component of a cyber-physical system measures conditions in the physical world?

Cyber-physical systems Easy
A. Actuator
B. Sensor
C. Broker
D. Firewall

9 What is the main function of an actuator in a cyber-physical system?

Cyber-physical systems Easy
A. Store a user password
B. Measure a physical condition
C. Route an internet packet
D. Perform a physical action

10 What does authorization determine in an IoT system?

The role of authorization Easy
A. Which resources a user may access
B. Where a sensor is manufactured
C. Whether a user's identity is genuine
D. How much power a device consumes

11 How is authorization different from authentication?

The role of authorization Easy
A. Authorization converts sensor data into analog signals
B. Authorization grants permissions after identity verification
C. Authorization assigns network addresses to new devices
D. Authorization verifies identity before granting permissions

12 Which principle gives an IoT user only the permissions needed to perform a task?

The role of authorization Easy
A. Principle of least privilege
B. Principle of maximum storage
C. Principle of public routing
D. Principle of open access

13 What is the main role of a broker in MQTT communication?

Network broker communication Easy
A. Measure and record temperature
B. Generate and store electricity
C. Receive and distribute messages
D. Assign and verify passwords

14 In broker-based communication, what does a publisher do?

Network broker communication Easy
A. Approves every user account
B. Receives every network packet
C. Sends messages to a topic
D. Creates physical sensor signals

15 How does an MQTT subscriber select the messages it wants to receive?

Network broker communication Easy
A. By changing the sensor battery
B. By replacing the network broker
C. By subscribing to a topic
D. By assigning a physical address

16 Which situation is a common IoT privacy concern?

Privacy issues in the Internet of Things Easy
A. Collecting personal data without consent
B. Updating device software with approval
C. Deleting data after its retention period
D. Encrypting data during transmission

17 Which technique helps protect private IoT data while it travels across a network?

Privacy issues in the Internet of Things Easy
A. Calibration
B. Aggregation
C. Compression
D. Encryption

18 What does data minimization mean in an IoT system?

Privacy issues in the Internet of Things Easy
A. Collecting all data that is available
B. Sharing every record with all users
C. Keeping every record for unlimited time
D. Collecting only data that is necessary

19 Which is an IoT-OAS application scenario in a smart home?

Internet of Things-OAS application scenarios Easy
A. Reading values from a manual gauge
B. Printing reports with an offline printer
C. Writing notes in a paper notebook
D. Controlling lights with connected sensors

20 Which IoT-OAS application scenario supports smart agriculture?

Internet of Things-OAS application scenarios Easy
A. Operating irrigation without environmental data
B. Recording rainfall in a paper diary
C. Inspecting each plant without instruments
D. Monitoring soil moisture with sensors

21 A smart-building system contains sensors from several manufacturers. Why are standardized communication protocols necessary in this situation?

Requirement of protocols Medium
A. They enable devices to interpret exchanged data consistently
B. They guarantee that every sensor has identical hardware
C. They eliminate the need for network security controls
D. They ensure that all devices consume equal power

22 A battery-powered soil sensor sends a small measurement every ten minutes over a low-bandwidth link. Which protocol requirement should receive the highest priority?

Requirement of protocols Medium
A. High-resolution multimedia transmission support
B. Large message headers for detailed routing information
C. Continuous synchronization with every nearby node
D. Low communication and processing overhead

23 An industrial alarm message must reach a controller within milliseconds, even when the network is busy. Which protocol property is most important?

Requirement of protocols Medium
A. Automatic discovery of social devices
B. Maximum compression of stored logs
C. Deterministic low-latency delivery
D. Support for large firmware images

24 A constrained IoT device must expose temperature readings through a request-response interface similar to HTTP while using UDP. Which protocol is the best fit?

Types of protocols Medium
A. FTP
B. MQTT
C. CoAP
D. Bluetooth Classic

25 A fleet-monitoring platform requires vehicles to publish location updates without knowing which applications will consume them. Which application protocol best supports this design?

Types of protocols Medium
A. HTTP polling
B. TFTP
C. CoAP
D. MQTT

26 A sensor network uses IPv6, but its IEEE 802.15.4 frames cannot efficiently carry standard IPv6 packets without adaptation. Which protocol addresses this issue?

Types of protocols Medium
A. Modbus TCP
B. AMQP
C. 6LoWPAN
D. WebSocket

27 In an automated greenhouse, sensors report temperature and a controller opens vents when the temperature rises. What makes this a cyber-physical system?

Cyber-physical systems Medium
A. Sensor readings are stored in a cloud database
B. Computation monitors and changes a physical process
C. Users can view measurements through a website
D. Every device uses the same wireless technology

28 A robotic assembly line depends on feedback from position sensors. If network delay varies significantly, what is the most likely consequence?

Cyber-physical systems Medium
A. The control loop may become unstable
B. The sensors will gain measurement accuracy
C. The controller will consume no bandwidth
D. The actuators will require no calibration

29 A connected insulin pump loses access to its cloud service. Which design best preserves cyber-physical safety?

Cyber-physical systems Medium
A. Deliver the last cloud dosage repeatedly
B. Continue locally within predefined safe limits
C. Disable all monitoring until reconnection
D. Accept commands from any reachable network

30 A hospital allows nurses to read patient sensor data but permits only physicians to change alarm thresholds. Which security mechanism enforces this distinction?

The role of authorization Medium
A. Role-based access control
B. Network traffic compression
C. Symmetric data encryption
D. Device address translation

31 A smart-lock service has already verified a user's identity. What must authorization determine next?

The role of authorization Medium
A. Whether the username belongs to the verified user
B. Whether the user may unlock the requested door
C. Whether the message can be compressed efficiently
D. Whether the device can obtain an IP address

32 A maintenance application needs temporary access to update one class of factory sensors. Which authorization approach best follows the principle of least privilege?

The role of authorization Medium
A. Grant permanent access to the entire factory network
B. Share the administrator password for one working day
C. Issue a time-limited token with update-only scope
D. Disable access checks during the maintenance window

33 In an MQTT-based home system, a temperature sensor publishes to home/kitchen/temperature. Which component forwards the message to interested clients?

Network broker communication Medium
A. The DNS resolver
B. The MQTT broker
C. The wireless access point
D. The temperature actuator

34 Two dashboard applications subscribe to the same MQTT topic. A sensor publishes one message to that topic. What should normally happen?

Network broker communication Medium
A. The first dashboard blocks delivery to the second
B. The broker forwards the message to both dashboards
C. The sensor selects one dashboard before publishing
D. The broker returns the message only to the sensor

35 A subscriber briefly disconnects but must receive critical MQTT messages published during the outage. Which configuration best supports this requirement?

Network broker communication Medium
A. An anonymous session with QoS 0 delivery
B. A new topic name for every sensor reading
C. A shorter keep-alive interval without persistence
D. A persistent session with an appropriate QoS

36 A fitness tracker removes names from records but keeps precise location trails and timestamps. Why can the records still create a privacy risk?

Privacy issues in the Internet of Things Medium
A. Location data cannot be transmitted over wireless links
B. Movement patterns may be linked back to individuals
C. Removing names makes access control unnecessary
D. Timestamps automatically invalidate encrypted records

37 A smart speaker records audio continuously but needs only a wake-word event to activate. Which change best applies data minimization?

Privacy issues in the Internet of Things Medium
A. Detect the wake word locally and discard unrelated audio
B. Share complete recordings with third-party applications
C. Upload all audio and retain it without an expiry date
D. Increase the recording quality before cloud transmission

38 An energy provider publishes detailed household meter readings every minute for research. Which measure most directly reduces occupancy-inference risk?

Privacy issues in the Internet of Things Medium
A. Increase the sampling rate of each smart meter
B. Store a second copy in another data center
C. Aggregate readings over longer time intervals
D. Replace device identifiers with longer identifiers

39 In an IoT-OAS smart-city scenario, parking sensors from different vendors must expose availability data to several applications. Which interface design best promotes interoperability?

Internet of Things-OAS application scenarios Medium
A. Require every application to connect to sensor circuitry
B. Use a documented resource model with standard data formats
C. Encode availability through vendor-specific timing patterns
D. Use a separate undocumented binary format for each vendor

40 An IoT-OAS agriculture application combines moisture sensors, weather data, and irrigation actuators. Which workflow best represents an effective application scenario?

Internet of Things-OAS application scenarios Medium
A. Give all external applications unrestricted valve control
B. Send raw measurements to actuators without decision logic
C. Analyze sensor context and authorize targeted irrigation commands
D. Run every irrigation valve continuously after device discovery

41 An IoT deployment contains battery-powered sensors, mobile gateways, intermittent connectivity, and devices from multiple vendors. Which protocol requirement is most critical for maintaining interoperability without imposing excessive energy and bandwidth costs?

Requirement of protocols Hard
A. A vendor-specific protocol optimized for one hardware family
B. A high-bandwidth transport with continuous connectivity
C. A common, compact communication model with extensible semantics
D. A centralized protocol that requires every device to maintain a persistent session with every other device

42 A temperature sensor retransmits an unchanged value every 30 seconds even when the measured temperature is stable. Which protocol-level improvement most directly reduces energy consumption while preserving meaningful monitoring accuracy?

Requirement of protocols Hard
A. Replace acknowledgments with duplicated messages
B. Require a persistent connection to the cloud
C. Increase the transmission frequency
D. Use event-driven reporting with bounded periodic refresh

43 A constrained environmental sensor must send small measurements through an unreliable low-power network, and the application can tolerate occasional loss but requires minimal overhead. Which protocol choice is most appropriate?

Types of protocols Hard
A. MQTT over a persistent TCP connection for every sensor
B. CoAP over UDP with confirmable messages only for critical measurements
C. FTP over TCP with application-level polling
D. HTTP over TCP for every measurement

44 An industrial monitoring system requires many sensors to publish data to several independent consumers. Consumers may temporarily disconnect, and producers should not track each consumer separately. Which communication pattern is the best fit?

Types of protocols Hard
A. Publish-subscribe communication through a broker
B. Point-to-point polling
C. Request-response communication
D. Direct remote procedure calls between every device pair

45 A gateway must translate between a REST-based sensor network and an MQTT-based analytics platform. Which design concern is most important when selecting the protocol stack?

Types of protocols Hard
A. Whether both protocols use identical packet formats
B. Whether all messages can be converted into plain text
C. Whether semantic meaning, delivery guarantees, and timing constraints are preserved
D. Whether the gateway eliminates all application-level metadata

46 A smart irrigation controller receives a delayed soil-moisture reading and activates a valve after heavy rainfall has already occurred. Which property of cyber-physical systems is most directly illustrated?

Cyber-physical systems Hard
A. The independence of software from physical processes
B. The irrelevance of sensor accuracy to actuator behavior
C. The effect of communication delay on physical control stability
D. The replacement of feedback control with one-time configuration

47 A factory robot is programmed to stop when vibration exceeds a threshold. An attacker injects normal-looking vibration values while physically damaging the robot. Which security property has failed most directly?

Cyber-physical systems Hard
A. Availability of network bandwidth
B. Integrity of sensor measurements
C. Confidentiality of operational data
D. Nonrepudiation of maintenance records

48 A medical monitoring system continues operating during a temporary network outage by using locally cached measurements and conservative actuator limits. Which design principle is being applied?

Cyber-physical systems Hard
A. Data minimization through permanent deletion
B. Protocol tunneling without local decision logic
C. Fail-safe local autonomy
D. Unrestricted remote control

49 An IoT platform authenticates a technician successfully, but the technician is allowed to change firmware on laboratory sensors and not on production sensors. Which mechanism enforces this distinction?

The role of authorization Hard
A. Encryption
B. Address translation
C. Authentication
D. Authorization

50 A building-management application receives a valid token issued to a maintenance user. The token permits reading energy data but not unlocking doors. Which authorization principle is most clearly represented?

The role of authorization Hard
A. Least privilege
B. Credential reuse
C. Anonymous delegation
D. Open access

51 A device accepts a command from a trusted gateway, but the command was originally issued for a different building and has been replayed later. Which authorization-related control would best address this edge case?

The role of authorization Hard
A. Allow all commands from authenticated gateways
B. Replace encrypted transport with unencrypted local transport
C. Use a longer device identifier
D. Bind authorization to audience, scope, and command freshness

52 In a broker-based IoT system, a publisher disconnects immediately after sending a message. Which broker feature most directly determines whether a later subscriber can still receive that message?

Network broker communication Hard
A. Message retention
B. Client display resolution
C. Local sensor sampling rate
D. Topic naming length

53 A subscriber loses connectivity and later reconnects. It must receive messages published during the outage, but duplicate delivery is acceptable because the application uses message identifiers for deduplication. Which communication strategy is most suitable?

Network broker communication Hard
A. A persistent subscription with at-least-once delivery
B. A request-response exchange that discards offline messages
C. Best-effort delivery without session state
D. Stateless anonymous publishing

54 A broker permits clients to subscribe to topics using the wildcard building/+/temperature. Which topic is intentionally excluded from this subscription?

Network broker communication Hard
A. building/floor2/temperature
B. building/roof/temperature
C. building/floor1/temperature
D. building/temperature

55 A smart speaker sends raw audio continuously to a cloud service even when no interaction is detected. Which privacy-preserving redesign most directly reduces unnecessary exposure?

Privacy issues in the Internet of Things Hard
A. Perform wake-word detection locally and upload only activated segments
B. Share the raw stream with additional analytics providers
C. Increase the audio sampling rate
D. Store all recordings indefinitely for future analysis

56 A set of smart-meter readings is anonymized by removing names, but an attacker combines timestamps with public occupancy information and identifies households. What privacy weakness does this demonstrate?

Privacy issues in the Internet of Things Hard
A. Re-identification through linkage attacks
B. Excessive encryption of stored data
C. Failure of packet fragmentation
D. Inadequate physical shielding

57 An IoT vendor collects precise location data although coarse regional information would satisfy the application requirement. Which privacy principle is being violated most directly?

Privacy issues in the Internet of Things Hard
A. Session persistence
B. Universal broadcast
C. Port randomization
D. Data minimization

58 In an IoT-OAS scenario, sensors, analytics services, and actuators are supplied by different organizations. Which architectural capability is most important for allowing services to discover and use one another without requiring bilateral integration with every provider?

Internet of Things-OAS application scenarios Hard
A. A single proprietary device manufacturer
B. A network in which sensors communicate only through fixed IP addresses
C. A common service description and discovery mechanism
D. Manual configuration of every device pair

59 A city deploys an IoT-OAS application in which traffic sensors publish congestion data, an analytics service predicts bottlenecks, and signal controllers adapt timings. Which feature best distinguishes this from a simple sensor dashboard?

Internet of Things-OAS application scenarios Hard
A. It composes sensing, analysis, and actuation into an operational service
B. It stores measurements without triggering actions
C. It limits all communication to a single device vendor
D. It removes the need for authorization because services are automated

60 An IoT-OAS healthcare application combines wearable sensors, a hospital platform, and an emergency-response service. A wearable becomes unavailable, but the application must continue using other trusted sources and report reduced confidence. Which architectural property is most relevant?

Internet of Things-OAS application scenarios Hard
A. Service composability with fault-aware substitution
B. Unrestricted data sharing across all services
C. Elimination of metadata from service responses
D. Rigid dependency on one sensor