Correct Answer: Monitoring soil moisture with sensors
Explanation:
Connected soil-moisture sensors can provide data for monitoring fields and controlling irrigation.
Incorrect! Try again.
21A smart-building system contains sensors from several manufacturers. Why are standardized communication protocols necessary in this situation?
Requirement of protocols
Medium
A.They enable devices to interpret exchanged data consistently
B.They guarantee that every sensor has identical hardware
C.They eliminate the need for network security controls
D.They ensure that all devices consume equal power
Correct Answer: They enable devices to interpret exchanged data consistently
Explanation:
Standardized protocols define common rules for formatting, transmitting, and interpreting data, allowing heterogeneous IoT devices to interoperate.
Incorrect! Try again.
22A battery-powered soil sensor sends a small measurement every ten minutes over a low-bandwidth link. Which protocol requirement should receive the highest priority?
Requirement of protocols
Medium
A.Large message headers for detailed routing information
B.Low communication and processing overhead
C.Continuous synchronization with every nearby node
D.High-resolution multimedia transmission support
Correct Answer: Low communication and processing overhead
Explanation:
Constrained sensors benefit from protocols with small messages and limited processing because these characteristics reduce bandwidth use and energy consumption.
Incorrect! Try again.
23An industrial alarm message must reach a controller within milliseconds, even when the network is busy. Which protocol property is most important?
Industrial alarms are time-critical, so the protocol must provide predictable and sufficiently low delivery latency.
Incorrect! Try again.
24A constrained IoT device must expose temperature readings through a request-response interface similar to HTTP while using UDP. Which protocol is the best fit?
Types of protocols
Medium
A.FTP
B.CoAP
C.MQTT
D.Bluetooth Classic
Correct Answer: CoAP
Explanation:
CoAP provides a lightweight REST-style request-response model and commonly operates over UDP, making it suitable for constrained devices.
Incorrect! Try again.
25A fleet-monitoring platform requires vehicles to publish location updates without knowing which applications will consume them. Which application protocol best supports this design?
Types of protocols
Medium
A.CoAP
B.TFTP
C.MQTT
D.HTTP polling
Correct Answer: MQTT
Explanation:
MQTT uses publish-subscribe communication, allowing publishers and subscribers to remain decoupled through a broker.
Incorrect! Try again.
26A sensor network uses IPv6, but its IEEE 802.15.4 frames cannot efficiently carry standard IPv6 packets without adaptation. Which protocol addresses this issue?
Types of protocols
Medium
A.WebSocket
B.Modbus TCP
C.6LoWPAN
D.AMQP
Correct Answer: 6LoWPAN
Explanation:
6LoWPAN adapts IPv6 to low-power wireless networks through techniques such as header compression and fragmentation.
Incorrect! Try again.
27In an automated greenhouse, sensors report temperature and a controller opens vents when the temperature rises. What makes this a cyber-physical system?
Cyber-physical systems
Medium
A.Computation monitors and changes a physical process
B.Users can view measurements through a website
C.Every device uses the same wireless technology
D.Sensor readings are stored in a cloud database
Correct Answer: Computation monitors and changes a physical process
Explanation:
A cyber-physical system integrates sensing, computation, and actuation so that digital decisions directly influence a physical process.
Incorrect! Try again.
28A robotic assembly line depends on feedback from position sensors. If network delay varies significantly, what is the most likely consequence?
Cyber-physical systems
Medium
A.The sensors will gain measurement accuracy
B.The controller will consume no bandwidth
C.The actuators will require no calibration
D.The control loop may become unstable
Correct Answer: The control loop may become unstable
Explanation:
Variable delay can cause a controller to act on outdated measurements, reducing control quality and potentially destabilizing the physical process.
Incorrect! Try again.
29A connected insulin pump loses access to its cloud service. Which design best preserves cyber-physical safety?
Cyber-physical systems
Medium
A.Accept commands from any reachable network
B.Disable all monitoring until reconnection
C.Deliver the last cloud dosage repeatedly
D.Continue locally within predefined safe limits
Correct Answer: Continue locally within predefined safe limits
Explanation:
A safety-critical device should fail safely by retaining essential local control and enforcing validated operating limits during connectivity loss.
Incorrect! Try again.
30A hospital allows nurses to read patient sensor data but permits only physicians to change alarm thresholds. Which security mechanism enforces this distinction?
The role of authorization
Medium
A.Role-based access control
B.Device address translation
C.Symmetric data encryption
D.Network traffic compression
Correct Answer: Role-based access control
Explanation:
Role-based access control assigns permissions according to roles, allowing different groups to perform different operations on the same resource.
Incorrect! Try again.
31A smart-lock service has already verified a user's identity. What must authorization determine next?
The role of authorization
Medium
A.Whether the message can be compressed efficiently
B.Whether the user may unlock the requested door
C.Whether the username belongs to the verified user
D.Whether the device can obtain an IP address
Correct Answer: Whether the user may unlock the requested door
Explanation:
Authentication verifies identity, while authorization decides whether that identity has permission to perform a specific action on a resource.
Incorrect! Try again.
32A maintenance application needs temporary access to update one class of factory sensors. Which authorization approach best follows the principle of least privilege?
The role of authorization
Medium
A.Share the administrator password for one working day
B.Issue a time-limited token with update-only scope
C.Grant permanent access to the entire factory network
D.Disable access checks during the maintenance window
Correct Answer: Issue a time-limited token with update-only scope
Explanation:
A scoped, expiring token grants only the permission and duration required for the maintenance task.
Incorrect! Try again.
33In an MQTT-based home system, a temperature sensor publishes to home/kitchen/temperature. Which component forwards the message to interested clients?
Network broker communication
Medium
A.The wireless access point
B.The DNS resolver
C.The temperature actuator
D.The MQTT broker
Correct Answer: The MQTT broker
Explanation:
The broker receives published messages, matches their topics against subscriptions, and forwards them to the appropriate subscribers.
Incorrect! Try again.
34Two dashboard applications subscribe to the same MQTT topic. A sensor publishes one message to that topic. What should normally happen?
Network broker communication
Medium
A.The first dashboard blocks delivery to the second
B.The broker forwards the message to both dashboards
C.The broker returns the message only to the sensor
D.The sensor selects one dashboard before publishing
Correct Answer: The broker forwards the message to both dashboards
Explanation:
Publish-subscribe brokers distribute a topic's message to every matching subscriber unless a special shared-subscription mechanism is used.
Incorrect! Try again.
35A subscriber briefly disconnects but must receive critical MQTT messages published during the outage. Which configuration best supports this requirement?
Network broker communication
Medium
A.A persistent session with an appropriate QoS
B.An anonymous session with QoS 0 delivery
C.A new topic name for every sensor reading
D.A shorter keep-alive interval without persistence
Correct Answer: A persistent session with an appropriate QoS
Explanation:
A persistent session lets the broker retain relevant subscription state and queue eligible QoS messages while the client is disconnected.
Incorrect! Try again.
36A fitness tracker removes names from records but keeps precise location trails and timestamps. Why can the records still create a privacy risk?
Privacy issues in the Internet of Things
Medium
A.Movement patterns may be linked back to individuals
B.Removing names makes access control unnecessary
C.Timestamps automatically invalidate encrypted records
D.Location data cannot be transmitted over wireless links
Correct Answer: Movement patterns may be linked back to individuals
Explanation:
Precise spatiotemporal patterns can uniquely identify people when combined with home, workplace, or other external information.
Incorrect! Try again.
37A smart speaker records audio continuously but needs only a wake-word event to activate. Which change best applies data minimization?
Privacy issues in the Internet of Things
Medium
A.Increase the recording quality before cloud transmission
B.Share complete recordings with third-party applications
C.Detect the wake word locally and discard unrelated audio
D.Upload all audio and retain it without an expiry date
Correct Answer: Detect the wake word locally and discard unrelated audio
Explanation:
Local processing and immediate deletion of unrelated audio reduce the amount of personal data collected, transmitted, and retained.
Incorrect! Try again.
38An energy provider publishes detailed household meter readings every minute for research. Which measure most directly reduces occupancy-inference risk?
Privacy issues in the Internet of Things
Medium
A.Increase the sampling rate of each smart meter
B.Store a second copy in another data center
C.Aggregate readings over longer time intervals
D.Replace device identifiers with longer identifiers
Correct Answer: Aggregate readings over longer time intervals
Explanation:
Temporal aggregation removes fine-grained usage patterns that could otherwise reveal when occupants are home or using particular appliances.
Incorrect! Try again.
39In an IoT-OAS smart-city scenario, parking sensors from different vendors must expose availability data to several applications. Which interface design best promotes interoperability?
Internet of Things-OAS application scenarios
Medium
A.Use a separate undocumented binary format for each vendor
B.Require every application to connect to sensor circuitry
C.Encode availability through vendor-specific timing patterns
D.Use a documented resource model with standard data formats
Correct Answer: Use a documented resource model with standard data formats
Explanation:
A documented interface and common representation allow independent applications to consume data from heterogeneous IoT devices consistently.
Incorrect! Try again.
40An IoT-OAS agriculture application combines moisture sensors, weather data, and irrigation actuators. Which workflow best represents an effective application scenario?
Internet of Things-OAS application scenarios
Medium
A.Give all external applications unrestricted valve control
B.Run every irrigation valve continuously after device discovery
C.Analyze sensor context and authorize targeted irrigation commands
D.Send raw measurements to actuators without decision logic
Correct Answer: Analyze sensor context and authorize targeted irrigation commands
Explanation:
An effective IoT application combines observations with context, makes a decision, and securely authorizes an appropriate physical action.
Incorrect! Try again.
41An IoT deployment contains battery-powered sensors, mobile gateways, intermittent connectivity, and devices from multiple vendors. Which protocol requirement is most critical for maintaining interoperability without imposing excessive energy and bandwidth costs?
Requirement of protocols
Hard
A.A common, compact communication model with extensible semantics
B.A vendor-specific protocol optimized for one hardware family
C.A high-bandwidth transport with continuous connectivity
D.A centralized protocol that requires every device to maintain a persistent session with every other device
Correct Answer: A common, compact communication model with extensible semantics
Explanation:
IoT protocols must preserve interoperability while minimizing overhead. A compact and extensible model supports constrained devices and heterogeneous vendors without requiring continuous, expensive communication.
Incorrect! Try again.
42A temperature sensor retransmits an unchanged value every 30 seconds even when the measured temperature is stable. Which protocol-level improvement most directly reduces energy consumption while preserving meaningful monitoring accuracy?
Requirement of protocols
Hard
A.Replace acknowledgments with duplicated messages
B.Use event-driven reporting with bounded periodic refresh
C.Require a persistent connection to the cloud
D.Increase the transmission frequency
Correct Answer: Use event-driven reporting with bounded periodic refresh
Explanation:
Event-driven reporting eliminates redundant transmissions, while bounded refresh messages prevent silent failures from going undetected.
Incorrect! Try again.
43A constrained environmental sensor must send small measurements through an unreliable low-power network, and the application can tolerate occasional loss but requires minimal overhead. Which protocol choice is most appropriate?
Types of protocols
Hard
A.FTP over TCP with application-level polling
B.HTTP over TCP for every measurement
C.MQTT over a persistent TCP connection for every sensor
D.CoAP over UDP with confirmable messages only for critical measurements
Correct Answer: CoAP over UDP with confirmable messages only for critical measurements
Explanation:
CoAP is designed for constrained devices. UDP avoids connection overhead, while selective confirmable messages provide reliability where the application actually requires it.
Incorrect! Try again.
44An industrial monitoring system requires many sensors to publish data to several independent consumers. Consumers may temporarily disconnect, and producers should not track each consumer separately. Which communication pattern is the best fit?
Types of protocols
Hard
A.Publish-subscribe communication through a broker
B.Point-to-point polling
C.Direct remote procedure calls between every device pair
D.Request-response communication
Correct Answer: Publish-subscribe communication through a broker
Explanation:
Publish-subscribe decouples producers from consumers. A broker can distribute messages to multiple subscribers and buffer or manage delivery when subscribers are temporarily unavailable.
Incorrect! Try again.
45A gateway must translate between a REST-based sensor network and an MQTT-based analytics platform. Which design concern is most important when selecting the protocol stack?
Types of protocols
Hard
A.Whether the gateway eliminates all application-level metadata
B.Whether all messages can be converted into plain text
C.Whether semantic meaning, delivery guarantees, and timing constraints are preserved
D.Whether both protocols use identical packet formats
Correct Answer: Whether semantic meaning, delivery guarantees, and timing constraints are preserved
Explanation:
Protocol translation is not merely format conversion. The gateway must preserve message meaning, quality-of-service expectations, ordering requirements, and timing behavior.
Incorrect! Try again.
46A smart irrigation controller receives a delayed soil-moisture reading and activates a valve after heavy rainfall has already occurred. Which property of cyber-physical systems is most directly illustrated?
Cyber-physical systems
Hard
A.The replacement of feedback control with one-time configuration
B.The irrelevance of sensor accuracy to actuator behavior
C.The effect of communication delay on physical control stability
D.The independence of software from physical processes
Correct Answer: The effect of communication delay on physical control stability
Explanation:
Cyber-physical systems tightly couple computation, communication, and physical dynamics. Delayed or stale data can cause inappropriate actuator decisions and unstable or inefficient behavior.
Incorrect! Try again.
47A factory robot is programmed to stop when vibration exceeds a threshold. An attacker injects normal-looking vibration values while physically damaging the robot. Which security property has failed most directly?
Cyber-physical systems
Hard
A.Availability of network bandwidth
B.Integrity of sensor measurements
C.Nonrepudiation of maintenance records
D.Confidentiality of operational data
Correct Answer: Integrity of sensor measurements
Explanation:
The controller receives manipulated data that no longer represents the physical state. This is an integrity failure in the sensing and control loop.
Incorrect! Try again.
48A medical monitoring system continues operating during a temporary network outage by using locally cached measurements and conservative actuator limits. Which design principle is being applied?
Cyber-physical systems
Hard
A.Fail-safe local autonomy
B.Data minimization through permanent deletion
C.Protocol tunneling without local decision logic
D.Unrestricted remote control
Correct Answer: Fail-safe local autonomy
Explanation:
Local fallback behavior allows the physical system to remain within safe operating limits when communication with remote services is unavailable.
Incorrect! Try again.
49An IoT platform authenticates a technician successfully, but the technician is allowed to change firmware on laboratory sensors and not on production sensors. Which mechanism enforces this distinction?
The role of authorization
Hard
A.Authentication
B.Address translation
C.Authorization
D.Encryption
Correct Answer: Authorization
Explanation:
Authentication establishes identity. Authorization determines which resources and operations that authenticated identity may access.
Incorrect! Try again.
50A building-management application receives a valid token issued to a maintenance user. The token permits reading energy data but not unlocking doors. Which authorization principle is most clearly represented?
The role of authorization
Hard
A.Least privilege
B.Open access
C.Credential reuse
D.Anonymous delegation
Correct Answer: Least privilege
Explanation:
Least privilege grants only the permissions required for the intended task, limiting the consequences of misuse or compromise.
Incorrect! Try again.
51A device accepts a command from a trusted gateway, but the command was originally issued for a different building and has been replayed later. Which authorization-related control would best address this edge case?
The role of authorization
Hard
A.Allow all commands from authenticated gateways
B.Replace encrypted transport with unencrypted local transport
C.Bind authorization to audience, scope, and command freshness
D.Use a longer device identifier
Correct Answer: Bind authorization to audience, scope, and command freshness
Explanation:
Authorization should constrain not only who may act but also where, what, and when. Audience restrictions, narrow scopes, timestamps, and nonces help prevent replay and cross-context misuse.
Incorrect! Try again.
52In a broker-based IoT system, a publisher disconnects immediately after sending a message. Which broker feature most directly determines whether a later subscriber can still receive that message?
Network broker communication
Hard
A.Message retention
B.Client display resolution
C.Topic naming length
D.Local sensor sampling rate
Correct Answer: Message retention
Explanation:
A retained message is stored by the broker and made available to future subscribers, subject to the broker's retention and delivery policies.
Incorrect! Try again.
53A subscriber loses connectivity and later reconnects. It must receive messages published during the outage, but duplicate delivery is acceptable because the application uses message identifiers for deduplication. Which communication strategy is most suitable?
Network broker communication
Hard
A.Best-effort delivery without session state
B.Stateless anonymous publishing
C.A request-response exchange that discards offline messages
D.A persistent subscription with at-least-once delivery
Correct Answer: A persistent subscription with at-least-once delivery
Explanation:
Persistent sessions can queue messages for disconnected subscribers. At-least-once delivery prioritizes eventual receipt, while application identifiers handle possible duplicates.
Incorrect! Try again.
54A broker permits clients to subscribe to topics using the wildcard building/+/temperature. Which topic is intentionally excluded from this subscription?
Network broker communication
Hard
A.building/temperature
B.building/floor2/temperature
C.building/floor1/temperature
D.building/roof/temperature
Correct Answer: building/temperature
Explanation:
The single-level wildcard + replaces exactly one topic level. The excluded topic has no level between building and temperature.
Incorrect! Try again.
55A smart speaker sends raw audio continuously to a cloud service even when no interaction is detected. Which privacy-preserving redesign most directly reduces unnecessary exposure?
Privacy issues in the Internet of Things
Hard
A.Share the raw stream with additional analytics providers
B.Increase the audio sampling rate
C.Store all recordings indefinitely for future analysis
D.Perform wake-word detection locally and upload only activated segments
Correct Answer: Perform wake-word detection locally and upload only activated segments
Explanation:
Local preprocessing and selective transmission reduce the amount of sensitive data collected and transferred while preserving the intended interaction.
Incorrect! Try again.
56A set of smart-meter readings is anonymized by removing names, but an attacker combines timestamps with public occupancy information and identifies households. What privacy weakness does this demonstrate?
Privacy issues in the Internet of Things
Hard
A.Inadequate physical shielding
B.Re-identification through linkage attacks
C.Failure of packet fragmentation
D.Excessive encryption of stored data
Correct Answer: Re-identification through linkage attacks
Explanation:
Removing direct identifiers does not guarantee anonymity. Auxiliary datasets can correlate patterns and reconstruct the identity of supposedly anonymized users.
Incorrect! Try again.
57An IoT vendor collects precise location data although coarse regional information would satisfy the application requirement. Which privacy principle is being violated most directly?
Privacy issues in the Internet of Things
Hard
A.Data minimization
B.Universal broadcast
C.Session persistence
D.Port randomization
Correct Answer: Data minimization
Explanation:
Data minimization requires collecting only the amount and precision of data necessary for the stated purpose.
Incorrect! Try again.
58In an IoT-OAS scenario, sensors, analytics services, and actuators are supplied by different organizations. Which architectural capability is most important for allowing services to discover and use one another without requiring bilateral integration with every provider?
Internet of Things-OAS application scenarios
Hard
A.Manual configuration of every device pair
B.A network in which sensors communicate only through fixed IP addresses
C.A single proprietary device manufacturer
D.A common service description and discovery mechanism
Correct Answer: A common service description and discovery mechanism
Explanation:
Open application service architectures depend on standardized descriptions, discovery, and interfaces so independently provided services can interoperate dynamically.
Incorrect! Try again.
59A city deploys an IoT-OAS application in which traffic sensors publish congestion data, an analytics service predicts bottlenecks, and signal controllers adapt timings. Which feature best distinguishes this from a simple sensor dashboard?
Internet of Things-OAS application scenarios
Hard
A.It limits all communication to a single device vendor
B.It stores measurements without triggering actions
C.It composes sensing, analysis, and actuation into an operational service
D.It removes the need for authorization because services are automated
Correct Answer: It composes sensing, analysis, and actuation into an operational service
Explanation:
An IoT-OAS application coordinates multiple networked capabilities to produce a useful service, including decisions that affect the physical environment.
Incorrect! Try again.
60An IoT-OAS healthcare application combines wearable sensors, a hospital platform, and an emergency-response service. A wearable becomes unavailable, but the application must continue using other trusted sources and report reduced confidence. Which architectural property is most relevant?
Internet of Things-OAS application scenarios
Hard
A.Service composability with fault-aware substitution
B.Rigid dependency on one sensor
C.Elimination of metadata from service responses
D.Unrestricted data sharing across all services
Correct Answer: Service composability with fault-aware substitution
Explanation:
Composable services can be combined and replaced when necessary. Reporting reduced confidence preserves situational awareness when an input service fails.
Incorrect! Try again.
Did this save you a night before the exam?
LPU Notes is free, and it stays free. Ads cover part of the server bill.
The rest comes out of a student's own pocket: the domain, the storage,
and keeping the site up through the weeks everyone needs it at once.
The payment button didn't load. An ad blocker or a filtered network is the usual reason.
to try again.
Nothing here is ever locked, and nothing unlocks. Chip in only if it was worth it.
What it pays for →