Unit 4: IoT Protocols and Security - Practice Quiz

ECE128 — Introduction To Iot Networking Protocols 60 Questions
0 Correct 0 Wrong 60 Left
0/60

1 Why are communication protocols required in IoT networks?

Requirement of protocols Easy
A. To remove the need for networks
B. To increase the size of sensors
C. To replace all physical devices
D. To define rules for exchanging data

2 What is a primary benefit of standard protocols in IoT?

Requirement of protocols Easy
A. Interoperability between different devices
B. Isolation between different devices
C. Unlimited power for every device
D. Elimination of all security risks

3 Which protocol feature is especially important for battery-powered IoT devices?

Requirement of protocols Easy
A. Low energy consumption
B. Large display support
C. Manual data processing
D. High printing quality

4 Which protocol is commonly used for lightweight publish-subscribe messaging in IoT?

Types of protocols Easy
A. HTTP
B. FTP
C. MQTT
D. SMTP

5 Which IoT application protocol commonly follows a request-response model and is designed for constrained devices?

Types of protocols Easy
A. Zigbee
B. CoAP
C. MQTT
D. Bluetooth

6 Which protocol provides addressing and routing across IP networks?

Types of protocols Easy
A. MQTT
B. Bluetooth
C. IPv6
D. CoAP

7 What does a cyber-physical system combine?

Cyber-physical systems Easy
A. Documents and printed records
B. Web pages and advertisements
C. Computing and physical processes
D. Passwords and account names

8 Which component of a cyber-physical system measures conditions in the physical world?

Cyber-physical systems Easy
A. Broker
B. Actuator
C. Sensor
D. Firewall

9 What is the main function of an actuator in a cyber-physical system?

Cyber-physical systems Easy
A. Route an internet packet
B. Measure a physical condition
C. Perform a physical action
D. Store a user password

10 What does authorization determine in an IoT system?

The role of authorization Easy
A. Which resources a user may access
B. Where a sensor is manufactured
C. How much power a device consumes
D. Whether a user's identity is genuine

11 How is authorization different from authentication?

The role of authorization Easy
A. Authorization assigns network addresses to new devices
B. Authorization grants permissions after identity verification
C. Authorization converts sensor data into analog signals
D. Authorization verifies identity before granting permissions

12 Which principle gives an IoT user only the permissions needed to perform a task?

The role of authorization Easy
A. Principle of public routing
B. Principle of maximum storage
C. Principle of open access
D. Principle of least privilege

13 What is the main role of a broker in MQTT communication?

Network broker communication Easy
A. Receive and distribute messages
B. Generate and store electricity
C. Measure and record temperature
D. Assign and verify passwords

14 In broker-based communication, what does a publisher do?

Network broker communication Easy
A. Creates physical sensor signals
B. Approves every user account
C. Sends messages to a topic
D. Receives every network packet

15 How does an MQTT subscriber select the messages it wants to receive?

Network broker communication Easy
A. By replacing the network broker
B. By subscribing to a topic
C. By assigning a physical address
D. By changing the sensor battery

16 Which situation is a common IoT privacy concern?

Privacy issues in the Internet of Things Easy
A. Deleting data after its retention period
B. Encrypting data during transmission
C. Updating device software with approval
D. Collecting personal data without consent

17 Which technique helps protect private IoT data while it travels across a network?

Privacy issues in the Internet of Things Easy
A. Compression
B. Calibration
C. Aggregation
D. Encryption

18 What does data minimization mean in an IoT system?

Privacy issues in the Internet of Things Easy
A. Keeping every record for unlimited time
B. Sharing every record with all users
C. Collecting only data that is necessary
D. Collecting all data that is available

19 Which is an IoT-OAS application scenario in a smart home?

Internet of Things-OAS application scenarios Easy
A. Reading values from a manual gauge
B. Writing notes in a paper notebook
C. Printing reports with an offline printer
D. Controlling lights with connected sensors

20 Which IoT-OAS application scenario supports smart agriculture?

Internet of Things-OAS application scenarios Easy
A. Operating irrigation without environmental data
B. Inspecting each plant without instruments
C. Recording rainfall in a paper diary
D. Monitoring soil moisture with sensors

21 A smart-building system contains sensors from several manufacturers. Why are standardized communication protocols necessary in this situation?

Requirement of protocols Medium
A. They enable devices to interpret exchanged data consistently
B. They guarantee that every sensor has identical hardware
C. They eliminate the need for network security controls
D. They ensure that all devices consume equal power

22 A battery-powered soil sensor sends a small measurement every ten minutes over a low-bandwidth link. Which protocol requirement should receive the highest priority?

Requirement of protocols Medium
A. Large message headers for detailed routing information
B. Low communication and processing overhead
C. Continuous synchronization with every nearby node
D. High-resolution multimedia transmission support

23 An industrial alarm message must reach a controller within milliseconds, even when the network is busy. Which protocol property is most important?

Requirement of protocols Medium
A. Support for large firmware images
B. Maximum compression of stored logs
C. Automatic discovery of social devices
D. Deterministic low-latency delivery

24 A constrained IoT device must expose temperature readings through a request-response interface similar to HTTP while using UDP. Which protocol is the best fit?

Types of protocols Medium
A. FTP
B. CoAP
C. MQTT
D. Bluetooth Classic

25 A fleet-monitoring platform requires vehicles to publish location updates without knowing which applications will consume them. Which application protocol best supports this design?

Types of protocols Medium
A. CoAP
B. TFTP
C. MQTT
D. HTTP polling

26 A sensor network uses IPv6, but its IEEE 802.15.4 frames cannot efficiently carry standard IPv6 packets without adaptation. Which protocol addresses this issue?

Types of protocols Medium
A. WebSocket
B. Modbus TCP
C. 6LoWPAN
D. AMQP

27 In an automated greenhouse, sensors report temperature and a controller opens vents when the temperature rises. What makes this a cyber-physical system?

Cyber-physical systems Medium
A. Computation monitors and changes a physical process
B. Users can view measurements through a website
C. Every device uses the same wireless technology
D. Sensor readings are stored in a cloud database

28 A robotic assembly line depends on feedback from position sensors. If network delay varies significantly, what is the most likely consequence?

Cyber-physical systems Medium
A. The sensors will gain measurement accuracy
B. The controller will consume no bandwidth
C. The actuators will require no calibration
D. The control loop may become unstable

29 A connected insulin pump loses access to its cloud service. Which design best preserves cyber-physical safety?

Cyber-physical systems Medium
A. Accept commands from any reachable network
B. Disable all monitoring until reconnection
C. Deliver the last cloud dosage repeatedly
D. Continue locally within predefined safe limits

30 A hospital allows nurses to read patient sensor data but permits only physicians to change alarm thresholds. Which security mechanism enforces this distinction?

The role of authorization Medium
A. Role-based access control
B. Device address translation
C. Symmetric data encryption
D. Network traffic compression

31 A smart-lock service has already verified a user's identity. What must authorization determine next?

The role of authorization Medium
A. Whether the message can be compressed efficiently
B. Whether the user may unlock the requested door
C. Whether the username belongs to the verified user
D. Whether the device can obtain an IP address

32 A maintenance application needs temporary access to update one class of factory sensors. Which authorization approach best follows the principle of least privilege?

The role of authorization Medium
A. Share the administrator password for one working day
B. Issue a time-limited token with update-only scope
C. Grant permanent access to the entire factory network
D. Disable access checks during the maintenance window

33 In an MQTT-based home system, a temperature sensor publishes to home/kitchen/temperature. Which component forwards the message to interested clients?

Network broker communication Medium
A. The wireless access point
B. The DNS resolver
C. The temperature actuator
D. The MQTT broker

34 Two dashboard applications subscribe to the same MQTT topic. A sensor publishes one message to that topic. What should normally happen?

Network broker communication Medium
A. The first dashboard blocks delivery to the second
B. The broker forwards the message to both dashboards
C. The broker returns the message only to the sensor
D. The sensor selects one dashboard before publishing

35 A subscriber briefly disconnects but must receive critical MQTT messages published during the outage. Which configuration best supports this requirement?

Network broker communication Medium
A. A persistent session with an appropriate QoS
B. An anonymous session with QoS 0 delivery
C. A new topic name for every sensor reading
D. A shorter keep-alive interval without persistence

36 A fitness tracker removes names from records but keeps precise location trails and timestamps. Why can the records still create a privacy risk?

Privacy issues in the Internet of Things Medium
A. Movement patterns may be linked back to individuals
B. Removing names makes access control unnecessary
C. Timestamps automatically invalidate encrypted records
D. Location data cannot be transmitted over wireless links

37 A smart speaker records audio continuously but needs only a wake-word event to activate. Which change best applies data minimization?

Privacy issues in the Internet of Things Medium
A. Increase the recording quality before cloud transmission
B. Share complete recordings with third-party applications
C. Detect the wake word locally and discard unrelated audio
D. Upload all audio and retain it without an expiry date

38 An energy provider publishes detailed household meter readings every minute for research. Which measure most directly reduces occupancy-inference risk?

Privacy issues in the Internet of Things Medium
A. Increase the sampling rate of each smart meter
B. Store a second copy in another data center
C. Aggregate readings over longer time intervals
D. Replace device identifiers with longer identifiers

39 In an IoT-OAS smart-city scenario, parking sensors from different vendors must expose availability data to several applications. Which interface design best promotes interoperability?

Internet of Things-OAS application scenarios Medium
A. Use a separate undocumented binary format for each vendor
B. Require every application to connect to sensor circuitry
C. Encode availability through vendor-specific timing patterns
D. Use a documented resource model with standard data formats

40 An IoT-OAS agriculture application combines moisture sensors, weather data, and irrigation actuators. Which workflow best represents an effective application scenario?

Internet of Things-OAS application scenarios Medium
A. Give all external applications unrestricted valve control
B. Run every irrigation valve continuously after device discovery
C. Analyze sensor context and authorize targeted irrigation commands
D. Send raw measurements to actuators without decision logic

41 An IoT deployment contains battery-powered sensors, mobile gateways, intermittent connectivity, and devices from multiple vendors. Which protocol requirement is most critical for maintaining interoperability without imposing excessive energy and bandwidth costs?

Requirement of protocols Hard
A. A common, compact communication model with extensible semantics
B. A vendor-specific protocol optimized for one hardware family
C. A high-bandwidth transport with continuous connectivity
D. A centralized protocol that requires every device to maintain a persistent session with every other device

42 A temperature sensor retransmits an unchanged value every 30 seconds even when the measured temperature is stable. Which protocol-level improvement most directly reduces energy consumption while preserving meaningful monitoring accuracy?

Requirement of protocols Hard
A. Replace acknowledgments with duplicated messages
B. Use event-driven reporting with bounded periodic refresh
C. Require a persistent connection to the cloud
D. Increase the transmission frequency

43 A constrained environmental sensor must send small measurements through an unreliable low-power network, and the application can tolerate occasional loss but requires minimal overhead. Which protocol choice is most appropriate?

Types of protocols Hard
A. FTP over TCP with application-level polling
B. HTTP over TCP for every measurement
C. MQTT over a persistent TCP connection for every sensor
D. CoAP over UDP with confirmable messages only for critical measurements

44 An industrial monitoring system requires many sensors to publish data to several independent consumers. Consumers may temporarily disconnect, and producers should not track each consumer separately. Which communication pattern is the best fit?

Types of protocols Hard
A. Publish-subscribe communication through a broker
B. Point-to-point polling
C. Direct remote procedure calls between every device pair
D. Request-response communication

45 A gateway must translate between a REST-based sensor network and an MQTT-based analytics platform. Which design concern is most important when selecting the protocol stack?

Types of protocols Hard
A. Whether the gateway eliminates all application-level metadata
B. Whether all messages can be converted into plain text
C. Whether semantic meaning, delivery guarantees, and timing constraints are preserved
D. Whether both protocols use identical packet formats

46 A smart irrigation controller receives a delayed soil-moisture reading and activates a valve after heavy rainfall has already occurred. Which property of cyber-physical systems is most directly illustrated?

Cyber-physical systems Hard
A. The replacement of feedback control with one-time configuration
B. The irrelevance of sensor accuracy to actuator behavior
C. The effect of communication delay on physical control stability
D. The independence of software from physical processes

47 A factory robot is programmed to stop when vibration exceeds a threshold. An attacker injects normal-looking vibration values while physically damaging the robot. Which security property has failed most directly?

Cyber-physical systems Hard
A. Availability of network bandwidth
B. Integrity of sensor measurements
C. Nonrepudiation of maintenance records
D. Confidentiality of operational data

48 A medical monitoring system continues operating during a temporary network outage by using locally cached measurements and conservative actuator limits. Which design principle is being applied?

Cyber-physical systems Hard
A. Fail-safe local autonomy
B. Data minimization through permanent deletion
C. Protocol tunneling without local decision logic
D. Unrestricted remote control

49 An IoT platform authenticates a technician successfully, but the technician is allowed to change firmware on laboratory sensors and not on production sensors. Which mechanism enforces this distinction?

The role of authorization Hard
A. Authentication
B. Address translation
C. Authorization
D. Encryption

50 A building-management application receives a valid token issued to a maintenance user. The token permits reading energy data but not unlocking doors. Which authorization principle is most clearly represented?

The role of authorization Hard
A. Least privilege
B. Open access
C. Credential reuse
D. Anonymous delegation

51 A device accepts a command from a trusted gateway, but the command was originally issued for a different building and has been replayed later. Which authorization-related control would best address this edge case?

The role of authorization Hard
A. Allow all commands from authenticated gateways
B. Replace encrypted transport with unencrypted local transport
C. Bind authorization to audience, scope, and command freshness
D. Use a longer device identifier

52 In a broker-based IoT system, a publisher disconnects immediately after sending a message. Which broker feature most directly determines whether a later subscriber can still receive that message?

Network broker communication Hard
A. Message retention
B. Client display resolution
C. Topic naming length
D. Local sensor sampling rate

53 A subscriber loses connectivity and later reconnects. It must receive messages published during the outage, but duplicate delivery is acceptable because the application uses message identifiers for deduplication. Which communication strategy is most suitable?

Network broker communication Hard
A. Best-effort delivery without session state
B. Stateless anonymous publishing
C. A request-response exchange that discards offline messages
D. A persistent subscription with at-least-once delivery

54 A broker permits clients to subscribe to topics using the wildcard building/+/temperature. Which topic is intentionally excluded from this subscription?

Network broker communication Hard
A. building/temperature
B. building/floor2/temperature
C. building/floor1/temperature
D. building/roof/temperature

55 A smart speaker sends raw audio continuously to a cloud service even when no interaction is detected. Which privacy-preserving redesign most directly reduces unnecessary exposure?

Privacy issues in the Internet of Things Hard
A. Share the raw stream with additional analytics providers
B. Increase the audio sampling rate
C. Store all recordings indefinitely for future analysis
D. Perform wake-word detection locally and upload only activated segments

56 A set of smart-meter readings is anonymized by removing names, but an attacker combines timestamps with public occupancy information and identifies households. What privacy weakness does this demonstrate?

Privacy issues in the Internet of Things Hard
A. Inadequate physical shielding
B. Re-identification through linkage attacks
C. Failure of packet fragmentation
D. Excessive encryption of stored data

57 An IoT vendor collects precise location data although coarse regional information would satisfy the application requirement. Which privacy principle is being violated most directly?

Privacy issues in the Internet of Things Hard
A. Data minimization
B. Universal broadcast
C. Session persistence
D. Port randomization

58 In an IoT-OAS scenario, sensors, analytics services, and actuators are supplied by different organizations. Which architectural capability is most important for allowing services to discover and use one another without requiring bilateral integration with every provider?

Internet of Things-OAS application scenarios Hard
A. Manual configuration of every device pair
B. A network in which sensors communicate only through fixed IP addresses
C. A single proprietary device manufacturer
D. A common service description and discovery mechanism

59 A city deploys an IoT-OAS application in which traffic sensors publish congestion data, an analytics service predicts bottlenecks, and signal controllers adapt timings. Which feature best distinguishes this from a simple sensor dashboard?

Internet of Things-OAS application scenarios Hard
A. It limits all communication to a single device vendor
B. It stores measurements without triggering actions
C. It composes sensing, analysis, and actuation into an operational service
D. It removes the need for authorization because services are automated

60 An IoT-OAS healthcare application combines wearable sensors, a hospital platform, and an emergency-response service. A wearable becomes unavailable, but the application must continue using other trusted sources and report reduced confidence. Which architectural property is most relevant?

Internet of Things-OAS application scenarios Hard
A. Service composability with fault-aware substitution
B. Rigid dependency on one sensor
C. Elimination of metadata from service responses
D. Unrestricted data sharing across all services