Unit 4: IoT Protocols and Security - Practice Quiz

ECE128 — Introduction To Iot Networking Protocols 60 Questions
0 Correct 0 Wrong 60 Left
0/60

1 Why are communication protocols required in IoT networks?

Requirement of protocols Easy
A. To remove the need for networks
B. To increase the size of sensors
C. To replace all physical devices
D. To define rules for exchanging data

2 What is a primary benefit of standard protocols in IoT?

Requirement of protocols Easy
A. Interoperability between different devices
B. Elimination of all security risks
C. Unlimited power for every device
D. Isolation between different devices

3 Which protocol feature is especially important for battery-powered IoT devices?

Requirement of protocols Easy
A. Manual data processing
B. Large display support
C. Low energy consumption
D. High printing quality

4 Which protocol is commonly used for lightweight publish-subscribe messaging in IoT?

Types of protocols Easy
A. MQTT
B. SMTP
C. FTP
D. HTTP

5 Which IoT application protocol commonly follows a request-response model and is designed for constrained devices?

Types of protocols Easy
A. MQTT
B. Bluetooth
C. CoAP
D. Zigbee

6 Which protocol provides addressing and routing across IP networks?

Types of protocols Easy
A. Bluetooth
B. CoAP
C. IPv6
D. MQTT

7 What does a cyber-physical system combine?

Cyber-physical systems Easy
A. Computing and physical processes
B. Documents and printed records
C. Passwords and account names
D. Web pages and advertisements

8 Which component of a cyber-physical system measures conditions in the physical world?

Cyber-physical systems Easy
A. Firewall
B. Broker
C. Actuator
D. Sensor

9 What is the main function of an actuator in a cyber-physical system?

Cyber-physical systems Easy
A. Measure a physical condition
B. Route an internet packet
C. Store a user password
D. Perform a physical action

10 What does authorization determine in an IoT system?

The role of authorization Easy
A. How much power a device consumes
B. Which resources a user may access
C. Where a sensor is manufactured
D. Whether a user's identity is genuine

11 How is authorization different from authentication?

The role of authorization Easy
A. Authorization verifies identity before granting permissions
B. Authorization converts sensor data into analog signals
C. Authorization grants permissions after identity verification
D. Authorization assigns network addresses to new devices

12 Which principle gives an IoT user only the permissions needed to perform a task?

The role of authorization Easy
A. Principle of open access
B. Principle of public routing
C. Principle of maximum storage
D. Principle of least privilege

13 What is the main role of a broker in MQTT communication?

Network broker communication Easy
A. Assign and verify passwords
B. Measure and record temperature
C. Generate and store electricity
D. Receive and distribute messages

14 In broker-based communication, what does a publisher do?

Network broker communication Easy
A. Approves every user account
B. Creates physical sensor signals
C. Sends messages to a topic
D. Receives every network packet

15 How does an MQTT subscriber select the messages it wants to receive?

Network broker communication Easy
A. By changing the sensor battery
B. By replacing the network broker
C. By assigning a physical address
D. By subscribing to a topic

16 Which situation is a common IoT privacy concern?

Privacy issues in the Internet of Things Easy
A. Deleting data after its retention period
B. Updating device software with approval
C. Encrypting data during transmission
D. Collecting personal data without consent

17 Which technique helps protect private IoT data while it travels across a network?

Privacy issues in the Internet of Things Easy
A. Encryption
B. Compression
C. Calibration
D. Aggregation

18 What does data minimization mean in an IoT system?

Privacy issues in the Internet of Things Easy
A. Collecting only data that is necessary
B. Collecting all data that is available
C. Keeping every record for unlimited time
D. Sharing every record with all users

19 Which is an IoT-OAS application scenario in a smart home?

Internet of Things-OAS application scenarios Easy
A. Reading values from a manual gauge
B. Controlling lights with connected sensors
C. Writing notes in a paper notebook
D. Printing reports with an offline printer

20 Which IoT-OAS application scenario supports smart agriculture?

Internet of Things-OAS application scenarios Easy
A. Recording rainfall in a paper diary
B. Inspecting each plant without instruments
C. Operating irrigation without environmental data
D. Monitoring soil moisture with sensors

21 A smart-building system contains sensors from several manufacturers. Why are standardized communication protocols necessary in this situation?

Requirement of protocols Medium
A. They ensure that all devices consume equal power
B. They guarantee that every sensor has identical hardware
C. They eliminate the need for network security controls
D. They enable devices to interpret exchanged data consistently

22 A battery-powered soil sensor sends a small measurement every ten minutes over a low-bandwidth link. Which protocol requirement should receive the highest priority?

Requirement of protocols Medium
A. Low communication and processing overhead
B. Continuous synchronization with every nearby node
C. Large message headers for detailed routing information
D. High-resolution multimedia transmission support

23 An industrial alarm message must reach a controller within milliseconds, even when the network is busy. Which protocol property is most important?

Requirement of protocols Medium
A. Support for large firmware images
B. Maximum compression of stored logs
C. Deterministic low-latency delivery
D. Automatic discovery of social devices

24 A constrained IoT device must expose temperature readings through a request-response interface similar to HTTP while using UDP. Which protocol is the best fit?

Types of protocols Medium
A. Bluetooth Classic
B. CoAP
C. MQTT
D. FTP

25 A fleet-monitoring platform requires vehicles to publish location updates without knowing which applications will consume them. Which application protocol best supports this design?

Types of protocols Medium
A. MQTT
B. HTTP polling
C. TFTP
D. CoAP

26 A sensor network uses IPv6, but its IEEE 802.15.4 frames cannot efficiently carry standard IPv6 packets without adaptation. Which protocol addresses this issue?

Types of protocols Medium
A. Modbus TCP
B. 6LoWPAN
C. AMQP
D. WebSocket

27 In an automated greenhouse, sensors report temperature and a controller opens vents when the temperature rises. What makes this a cyber-physical system?

Cyber-physical systems Medium
A. Computation monitors and changes a physical process
B. Sensor readings are stored in a cloud database
C. Users can view measurements through a website
D. Every device uses the same wireless technology

28 A robotic assembly line depends on feedback from position sensors. If network delay varies significantly, what is the most likely consequence?

Cyber-physical systems Medium
A. The sensors will gain measurement accuracy
B. The actuators will require no calibration
C. The control loop may become unstable
D. The controller will consume no bandwidth

29 A connected insulin pump loses access to its cloud service. Which design best preserves cyber-physical safety?

Cyber-physical systems Medium
A. Continue locally within predefined safe limits
B. Disable all monitoring until reconnection
C. Deliver the last cloud dosage repeatedly
D. Accept commands from any reachable network

30 A hospital allows nurses to read patient sensor data but permits only physicians to change alarm thresholds. Which security mechanism enforces this distinction?

The role of authorization Medium
A. Device address translation
B. Network traffic compression
C. Symmetric data encryption
D. Role-based access control

31 A smart-lock service has already verified a user's identity. What must authorization determine next?

The role of authorization Medium
A. Whether the username belongs to the verified user
B. Whether the device can obtain an IP address
C. Whether the user may unlock the requested door
D. Whether the message can be compressed efficiently

32 A maintenance application needs temporary access to update one class of factory sensors. Which authorization approach best follows the principle of least privilege?

The role of authorization Medium
A. Issue a time-limited token with update-only scope
B. Grant permanent access to the entire factory network
C. Share the administrator password for one working day
D. Disable access checks during the maintenance window

33 In an MQTT-based home system, a temperature sensor publishes to home/kitchen/temperature. Which component forwards the message to interested clients?

Network broker communication Medium
A. The MQTT broker
B. The wireless access point
C. The temperature actuator
D. The DNS resolver

34 Two dashboard applications subscribe to the same MQTT topic. A sensor publishes one message to that topic. What should normally happen?

Network broker communication Medium
A. The broker returns the message only to the sensor
B. The first dashboard blocks delivery to the second
C. The sensor selects one dashboard before publishing
D. The broker forwards the message to both dashboards

35 A subscriber briefly disconnects but must receive critical MQTT messages published during the outage. Which configuration best supports this requirement?

Network broker communication Medium
A. A new topic name for every sensor reading
B. A persistent session with an appropriate QoS
C. An anonymous session with QoS 0 delivery
D. A shorter keep-alive interval without persistence

36 A fitness tracker removes names from records but keeps precise location trails and timestamps. Why can the records still create a privacy risk?

Privacy issues in the Internet of Things Medium
A. Movement patterns may be linked back to individuals
B. Location data cannot be transmitted over wireless links
C. Removing names makes access control unnecessary
D. Timestamps automatically invalidate encrypted records

37 A smart speaker records audio continuously but needs only a wake-word event to activate. Which change best applies data minimization?

Privacy issues in the Internet of Things Medium
A. Increase the recording quality before cloud transmission
B. Upload all audio and retain it without an expiry date
C. Detect the wake word locally and discard unrelated audio
D. Share complete recordings with third-party applications

38 An energy provider publishes detailed household meter readings every minute for research. Which measure most directly reduces occupancy-inference risk?

Privacy issues in the Internet of Things Medium
A. Store a second copy in another data center
B. Increase the sampling rate of each smart meter
C. Aggregate readings over longer time intervals
D. Replace device identifiers with longer identifiers

39 In an IoT-OAS smart-city scenario, parking sensors from different vendors must expose availability data to several applications. Which interface design best promotes interoperability?

Internet of Things-OAS application scenarios Medium
A. Require every application to connect to sensor circuitry
B. Use a separate undocumented binary format for each vendor
C. Use a documented resource model with standard data formats
D. Encode availability through vendor-specific timing patterns

40 An IoT-OAS agriculture application combines moisture sensors, weather data, and irrigation actuators. Which workflow best represents an effective application scenario?

Internet of Things-OAS application scenarios Medium
A. Analyze sensor context and authorize targeted irrigation commands
B. Send raw measurements to actuators without decision logic
C. Give all external applications unrestricted valve control
D. Run every irrigation valve continuously after device discovery

41 An IoT deployment contains battery-powered sensors, mobile gateways, intermittent connectivity, and devices from multiple vendors. Which protocol requirement is most critical for maintaining interoperability without imposing excessive energy and bandwidth costs?

Requirement of protocols Hard
A. A high-bandwidth transport with continuous connectivity
B. A centralized protocol that requires every device to maintain a persistent session with every other device
C. A common, compact communication model with extensible semantics
D. A vendor-specific protocol optimized for one hardware family

42 A temperature sensor retransmits an unchanged value every 30 seconds even when the measured temperature is stable. Which protocol-level improvement most directly reduces energy consumption while preserving meaningful monitoring accuracy?

Requirement of protocols Hard
A. Use event-driven reporting with bounded periodic refresh
B. Replace acknowledgments with duplicated messages
C. Require a persistent connection to the cloud
D. Increase the transmission frequency

43 A constrained environmental sensor must send small measurements through an unreliable low-power network, and the application can tolerate occasional loss but requires minimal overhead. Which protocol choice is most appropriate?

Types of protocols Hard
A. MQTT over a persistent TCP connection for every sensor
B. CoAP over UDP with confirmable messages only for critical measurements
C. FTP over TCP with application-level polling
D. HTTP over TCP for every measurement

44 An industrial monitoring system requires many sensors to publish data to several independent consumers. Consumers may temporarily disconnect, and producers should not track each consumer separately. Which communication pattern is the best fit?

Types of protocols Hard
A. Publish-subscribe communication through a broker
B. Direct remote procedure calls between every device pair
C. Point-to-point polling
D. Request-response communication

45 A gateway must translate between a REST-based sensor network and an MQTT-based analytics platform. Which design concern is most important when selecting the protocol stack?

Types of protocols Hard
A. Whether both protocols use identical packet formats
B. Whether all messages can be converted into plain text
C. Whether the gateway eliminates all application-level metadata
D. Whether semantic meaning, delivery guarantees, and timing constraints are preserved

46 A smart irrigation controller receives a delayed soil-moisture reading and activates a valve after heavy rainfall has already occurred. Which property of cyber-physical systems is most directly illustrated?

Cyber-physical systems Hard
A. The replacement of feedback control with one-time configuration
B. The independence of software from physical processes
C. The irrelevance of sensor accuracy to actuator behavior
D. The effect of communication delay on physical control stability

47 A factory robot is programmed to stop when vibration exceeds a threshold. An attacker injects normal-looking vibration values while physically damaging the robot. Which security property has failed most directly?

Cyber-physical systems Hard
A. Availability of network bandwidth
B. Nonrepudiation of maintenance records
C. Integrity of sensor measurements
D. Confidentiality of operational data

48 A medical monitoring system continues operating during a temporary network outage by using locally cached measurements and conservative actuator limits. Which design principle is being applied?

Cyber-physical systems Hard
A. Unrestricted remote control
B. Fail-safe local autonomy
C. Data minimization through permanent deletion
D. Protocol tunneling without local decision logic

49 An IoT platform authenticates a technician successfully, but the technician is allowed to change firmware on laboratory sensors and not on production sensors. Which mechanism enforces this distinction?

The role of authorization Hard
A. Authorization
B. Address translation
C. Authentication
D. Encryption

50 A building-management application receives a valid token issued to a maintenance user. The token permits reading energy data but not unlocking doors. Which authorization principle is most clearly represented?

The role of authorization Hard
A. Anonymous delegation
B. Least privilege
C. Open access
D. Credential reuse

51 A device accepts a command from a trusted gateway, but the command was originally issued for a different building and has been replayed later. Which authorization-related control would best address this edge case?

The role of authorization Hard
A. Replace encrypted transport with unencrypted local transport
B. Use a longer device identifier
C. Allow all commands from authenticated gateways
D. Bind authorization to audience, scope, and command freshness

52 In a broker-based IoT system, a publisher disconnects immediately after sending a message. Which broker feature most directly determines whether a later subscriber can still receive that message?

Network broker communication Hard
A. Local sensor sampling rate
B. Client display resolution
C. Message retention
D. Topic naming length

53 A subscriber loses connectivity and later reconnects. It must receive messages published during the outage, but duplicate delivery is acceptable because the application uses message identifiers for deduplication. Which communication strategy is most suitable?

Network broker communication Hard
A. Best-effort delivery without session state
B. A persistent subscription with at-least-once delivery
C. A request-response exchange that discards offline messages
D. Stateless anonymous publishing

54 A broker permits clients to subscribe to topics using the wildcard building/+/temperature. Which topic is intentionally excluded from this subscription?

Network broker communication Hard
A. building/floor2/temperature
B. building/floor1/temperature
C. building/roof/temperature
D. building/temperature

55 A smart speaker sends raw audio continuously to a cloud service even when no interaction is detected. Which privacy-preserving redesign most directly reduces unnecessary exposure?

Privacy issues in the Internet of Things Hard
A. Perform wake-word detection locally and upload only activated segments
B. Increase the audio sampling rate
C. Share the raw stream with additional analytics providers
D. Store all recordings indefinitely for future analysis

56 A set of smart-meter readings is anonymized by removing names, but an attacker combines timestamps with public occupancy information and identifies households. What privacy weakness does this demonstrate?

Privacy issues in the Internet of Things Hard
A. Inadequate physical shielding
B. Re-identification through linkage attacks
C. Excessive encryption of stored data
D. Failure of packet fragmentation

57 An IoT vendor collects precise location data although coarse regional information would satisfy the application requirement. Which privacy principle is being violated most directly?

Privacy issues in the Internet of Things Hard
A. Port randomization
B. Data minimization
C. Session persistence
D. Universal broadcast

58 In an IoT-OAS scenario, sensors, analytics services, and actuators are supplied by different organizations. Which architectural capability is most important for allowing services to discover and use one another without requiring bilateral integration with every provider?

Internet of Things-OAS application scenarios Hard
A. Manual configuration of every device pair
B. A single proprietary device manufacturer
C. A common service description and discovery mechanism
D. A network in which sensors communicate only through fixed IP addresses

59 A city deploys an IoT-OAS application in which traffic sensors publish congestion data, an analytics service predicts bottlenecks, and signal controllers adapt timings. Which feature best distinguishes this from a simple sensor dashboard?

Internet of Things-OAS application scenarios Hard
A. It limits all communication to a single device vendor
B. It composes sensing, analysis, and actuation into an operational service
C. It removes the need for authorization because services are automated
D. It stores measurements without triggering actions

60 An IoT-OAS healthcare application combines wearable sensors, a hospital platform, and an emergency-response service. A wearable becomes unavailable, but the application must continue using other trusted sources and report reduced confidence. Which architectural property is most relevant?

Internet of Things-OAS application scenarios Hard
A. Service composability with fault-aware substitution
B. Elimination of metadata from service responses
C. Rigid dependency on one sensor
D. Unrestricted data sharing across all services