Disclaimer:
Educational Use Only:
The website links provided are to be used strictly for educational and knowledge-gaining purposes only.
No Misuse:
Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.
Respect for Websites and Businesses:
Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.
Acknowledge Value of Knowledge:
Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.
No Endorsement:
The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.
User Responsibility:
By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.
- Which core algorithm is used by ZigBee for encryption?
a. DES
b. AES-128
c. RC4
d. Blowfish
Answer: b. AES-128automationcommunity+2 - What layer in ZigBee is responsible for managing security keys?
a. Application Layer
b. Physical Layer
c. Network Layer
d. Transport Layer
Answer: c. Network Layerautomationcommunity+1 - Which device manages joining permissions and distributes network keys in centralized ZigBee security?
a. Router
b. End Device
c. Trust Center
d. Gateway
Answer: c. Trust Centerpostquantum+2 - What vulnerability can occur if ZigBee network keys are transmitted in clear text?
a. Buffer overflow
b. Man-in-the-middle attack
c. Sniffing attack
d. SQL Injection
Answer: c. Sniffing attackpayatu+1 - Which ZigBee attack involves excessive packet transmission to drain device batteries?
a. Energy Depletion Attack
b. Session Hijacking
c. Replay Attack
d. MAC Flooding
Answer: a. Energy Depletion Attackpayatu - What type of security key is used for pairwise communication in ZigBee?
a. Public key
b. Link key
c. Session key
d. Network key
Answer: b. Link keyautomationcommunity+1 - Which threat exploits reused link keys for ZigBee network rejoining?
a. Buffer Overflow
b. Spoofing attack
c. DNS Hijacking
d. Phishing
Answer: b. Spoofing attackpayatu - Which ZigBee feature ensures integrity and authenticity for each message frame?
a. MAC Address Filtering
b. Message Integrity Code (MIC)
c. WEP Encryption
d. Firewall
Answer: b. Message Integrity Code (MIC)postquantum - Which security measure detects repeated transmissions of previously valid ZigBee frames?
a. Frame counter replay protection
b. Sequence number randomization
c. Network isolation
d. MAC filtering
Answer: a. Frame counter replay protectionpostquantum - What is the key risk of using ZigBee’s default link key?
a. Brute force attack
b. Network compromise by rogue device
c. SQL Injection
d. Man-in-the-browser
Answer: b. Network compromise by rogue devicepmc.ncbi.nlm.nih+1 - What process ensures new ZigBee devices are trusted upon joining?
a. Proof-of-work
b. Device authentication
c. Port knocking
d. NAT traversal
Answer: b. Device authenticationautomationcommunity+1 - Which attack targets the MAC layer with random frames to cause Denial of Service?
a. Radio frequency interference
b. Link Layer Jamming
c. MAC Poisoning
d. SYN Flood
Answer: b. Link Layer Jammingpmc.ncbi.nlm.nih+1 - What function does the Trust Center carry out in ZigBee’s centralized security model?
a. Internet routing
b. Security key management
c. Content filtering
d. Firmware updating
Answer: b. Security key managementautomationcommunity+2 - Which vulnerability allows unauthorized ZigBee network access via sniffing during device joining?
a. Evil twin attack
b. Insecure key transport
c. ARP poisoning
d. Zip bomb
Answer: b. Insecure key transportpmc.ncbi.nlm.nih+1 - How can ZigBee prevent unauthorized frame retransmission (replay modification)?
a. VLAN tagging
b. Frame counter mechanism
c. ICMP blocking
d. CRC checking
Answer: b. Frame counter mechanismpostquantum - Which security model allows device-to-device key sharing without central management?
a. Decentralized security model
b. Star topology model
c. Hierarchical trust model
d. Mesh security model
Answer: a. Decentralized security modelautomationcommunity+1 - What attack sends ACK frames with correct sequence numbers to disrupt communication?
a. ACK spoofing
b. SYN replay
c. Null byte injection
d. DHCP starvation
Answer: a. ACK spoofingpayatu - Which configuration enhances security during ZigBee device onboarding?
a. Disabling encryption
b. Using install codes
c. Enabling guest network
d. Disabling authentication
Answer: b. Using install codespmc.ncbi.nlm.nih - What ZigBee feature protects against unauthorized access between communication layers?
a. Layered access control
b. Port security
c. Channel isolation
d. Application firewall
Answer: a. Layered access controlpostquantum+1 - Which protocol version introduced mandatory Trust Center link key updates?
a. ZigBee 2.0
b. ZigBee 3.0
c. ZigBee PRO 2023
d. ZigBee 1.2
Answer: b. ZigBee 3.0silabs+1 - What type of attack is ZigBee network most vulnerable to due to wireless medium?
a. SQL Injection
b. Eavesdropping
c. Ransomware
d. Botnet
Answer: b. Eavesdroppingautomationcommunity+1 - What countermeasure is recommended to secure ZigBee key storage?
a. Store keys in firmware plaintext
b. Use secure storage methods
c. Email keys to administrator
d. Use simple password
Answer: b. Use secure storage methodspayatu+1 - Which Denial of Service method disrupts ZigBee communication at physical layer?
a. Channel flooding
b. Radio Jamming
c. Data interception
d. Card cloning
Answer: b. Radio Jammingpmc.ncbi.nlm.nih+1 - What vulnerability occurs if acknowledgments in ZigBee are unauthenticated?
a. Frame duplication
b. ACK Spoofing
c. MAC filter bypass
d. Routing loop
Answer: b. ACK Spoofingpayatu - What is a recommended defense against ZigBee link key vulnerability?
a. Disabling encryption
b. Rotating keys regularly
c. Permitting anonymous access
d. Using static keys
Answer: b. Rotating keys regularlynature+1 - Which ZigBee specification update reinforced device security and IoT resilience?
a. ZigBee PRO 2023
b. ZigBee 1.0
c. ZigBee PRO 2017
d. ZigBee 2.1
Answer: a. ZigBee PRO 2023silabs - What mechanism does ZigBee use for broadcast network communication security?
a. Hashing
b. Symmetric group keys
c. Trust center keys
d. Public session keys
Answer: b. Symmetric group keysautomationcommunity+1 - What is a ZigBee Injection attack?
a. Infecting devices with malware
b. Injecting unauthorized commands
c. Data mining
d. Packet sniffing
Answer: b. Injecting unauthorized commandsstartupdefense - What is a main challenge for ZigBee’s implementation in critical infrastructure?
a. Lack of cloud support
b. Security constraints due to low cost and power
c. Excessive data rates
d. Proprietary standards
Answer: b. Security constraints due to low cost and powersciencedirect+1 - Which countermeasure addresses buffer overflow vulnerabilities in ZigBee devices?
a. Increased network key length
b. Proper input validation
c. Disabled encryption
d. Network isolation
Answer: b. Proper input validationcve - What kind of attack exploits insecure key sharing among ZigBee nodes?
a. Man-in-the-middle attack
b. ARP spoofing
c. Evil twin
d. Phishing
Answer: a. Man-in-the-middle attackpmc.ncbi.nlm.nih+1 - How does device authentication operate in ZigBee’s trust center management?
a. Devices are authenticated by pre-shared keys
b. All devices use default keys
c. Trust Center randomly assigns device names
d. No authentication required
Answer: a. Devices are authenticated by pre-shared keysautomationcommunity+2 - What method protects ZigBee against network flooding attacks?
a. Increased transmission power
b. Traffic rate limiting
c. Channel adaptation
d. Packet fragmentation
Answer: b. Traffic rate limitingpayatu+1 - How can key rotation in ZigBee networks be optimized?
a. Fixed rotation schedule
b. Reinforcement learning algorithms
c. Manual updates only
d. Rotation disabled
Answer: b. Reinforcement learning algorithmsnature - What security flaw exists if keys are stored in device firmware without encryption?
a. Physical tampering
b. Easy extraction by reverse engineering
c. Network isolation
d. VLAN hopping
Answer: b. Easy extraction by reverse engineeringpmc.ncbi.nlm.nih+1 - Which attack targets ZigBee by causing packet drops and bandwidth depletion?
a. Link Layer Jamming
b. Cross-site scripting
c. SQL Injection
d. Port scanning
Answer: a. Link Layer Jammingpayatu+1 - What role does install code-based registration play in ZigBee security?
a. Prevents unauthorized device onboarding
b. Speeds up device pairing
c. Ensures anonymous network traffic
d. Reduces encryption overhead
Answer: a. Prevents unauthorized device onboardingpmc.ncbi.nlm.nih - What is a critical feature of ZigBee security at the application layer?
a. End-to-end encryption
b. Channel monitoring
c. VLAN tagging
d. Information obfuscation
Answer: a. End-to-end encryptionautomationcommunity+1 - Which of the following can cause data loss in a ZigBee network?
a. MAC Address duplication
b. Remote AT command exploitation
c. Password reset
d. Device reboot
Answer: b. Remote AT command exploitationpmc.ncbi.nlm.nih - What should be enabled to analyze abnormal traffic patterns in ZigBee networks?
a. AI-based anomaly detection
b. Firewall logs
c. Plain TCP/IP monitoring
d. OS-level auditing
Answer: a. AI-based anomaly detectionpmc.ncbi.nlm.nih - Which ZigBee version enhanced protection against unencrypted network key transport?
a. ZigBee 1.0
b. ZigBee 2.0
c. ZigBee 3.0
d. ZigBee PRO 2023
Answer: c. ZigBee 3.0silabs+1 - What is the main weakness in ZigBee’s ACK frame handling?
a. Unauthenticated ACK frames
b. Over-encryption
c. IP spoofing
d. Key overuse
Answer: a. Unauthenticated ACK framespayatu+1 - What mitigates ZigBee jamming attacks best?
a. Changing network frequency
b. Field-level device reboot
c. Disabling encryption
d. Reducing polling rate
Answer: a. Changing network frequencypayatu+1 - Which IoT protocol is ZigBee based on?
a. Bluetooth
b. IEEE 802.15.4
c. Wi-Fi
d. LoRaWAN
Answer: b. IEEE 802.15.4sciencedirect+1 - What is the consequence of not updating Trust Center link keys in ZigBee?
a. Stronger security
b. Increased risk of key compromise
c. Improved speed
d. Reduced cost
Answer: b. Increased risk of key compromisesilabs+1 - What ZigBee security control prevents unauthorized device network access?
a. Role-based access
b. Install codes and authentication
c. VLAN hopping
d. Layer 2 tunneling
Answer: b. Install codes and authenticationautomationcommunity+1 - Which ZigBee mechanism provides confidentiality and integrity for broadcast messages?
a. MIC for payload signing
b. Plain text transmission
c. CRC only
d. No protection
Answer: a. MIC for payload signingpostquantum+1 - What type of attack is ZigBee vulnerable to due to lack of robust defense mechanisms?
a. Denial of Service attacks
b. Password cracking
c. Social engineering
d. Port scanning
Answer: a. Denial of Service attackspayatu+1 - What is a ZigBee Trust Center’s main security responsibility?
a. Key distribution and management
b. Device location tracking
c. Firmware patching
d. Channel adaptation
Answer: a. Key distribution and managementpostquantum+2 - What’s a recommended best practice for securing ZigBee networks?
a. Use default configuration only
b. Enable install codes and update keys
c. Disable authentication
d. Allow open device joining
Answer: b. Enable install codes and update keyssilabs+2
- https://automationcommunity.com/zigbee-communication-protocol-questions/
- https://postquantum.com/5g-security/zigbee-security-overview/
- https://pmc.ncbi.nlm.nih.gov/articles/PMC12349651/
- https://automationcommunity.com/zigbee-questions-and-answers/
- https://payatu.com/blog/zigbee-security-101-architecture-and-security-issues/
- https://www.silabs.com/blog/zigbee-pro-2023-spec-released-increases-security
- https://www.nature.com/articles/s41598-024-64895-8
- https://www.startupdefense.io/cyberattacks/zigbee-injection
- https://www.sciencedirect.com/science/article/abs/pii/S2542660523001142
- https://www.cve.org/CVERecord/SearchResults?query=zigbee
- https://letsfindcourse.com/miscellaneous-mcq/zigbee-technology-mcq-questions-and-answers
- https://wayground.com/admin/quiz/612c2e60625fce001f9a86ad/zigbee
- https://interviewkickstart.com/blogs/articles/iot-mcqs
- https://www.scribd.com/document/868267977/ZigBee-Serial-Advanced-MCQs
- https://electricajournal.org/index.php/pub/article/view/1182/1179
- https://community.openhab.org/t/zigbee-basic-questions-from-n00b/96706
- https://www.facebook.com/groups/EffectiveCISSP/posts/1208277843036105/
- https://www.utdallas.edu/~shao/papers/wang_ccs22.pdf
- https://ieeexplore.ieee.org/document/8809115/
- https://www.intelliroot.com/blogs/zigbee-protocol/