IPA IP 2026 Question 55
A question IPA Japan published in 令和8年度 ITパスポート試験 公開問題 問55, translated into English. ITPEC is based on the same exams.
Which of the following is the appropriate combination of words to be inserted into blanks A and B in the following description concerning the security of IoT?
Among the threats of the images of a network camera being viewed secretly, as a countermeasure against A on the network camera, in order to prevent a third party from accessing the camera and viewing its video, the camera is not used with B.
Explanation
A: unauthorized intrusion, B: the initial password — a third party gets into a network camera by logging in with the password it was shipped with.
A network camera is an IoT device that sends its video over the network, usually with a login screen for viewing and settings. The threat described, a third party accessing the camera and viewing its video, is an unauthorized intrusion into the camera. Many cameras ship with an initial password that is the same for every unit of the model or is printed in the manual, and attackers try such lists of default passwords automatically; the Mirai malware took over large numbers of cameras this way. So the countermeasure is not to use the camera with the initial password: change it to a strong one when the camera is installed.
Answer (c)
Why not others:
- •(a) and (b) — a DDoS attack floods a target with traffic from many machines to stop its service; it does not let anyone view the video (hijacked cameras can be made to take part in DDoS attacks on others, but that is a different threat)
- •(d) — the intruder gets in through the camera’s login, not through the kind of line it uses; not using a wired line does nothing to stop a login with the initial password
Key rule: The first defence for any IoT device is to change its initial password: default passwords are public knowledge and the easiest way into the device.
Security · AI-written, may contain errors
This question comes from the past questions IPA Japan publishes, translated into English by ITPEC Practice. ITPEC Practice is an independent study tool and is not affiliated with IPA or ITPEC. See the original paper (PDF) or Report an issue.