Why security protects deployed IoT devices in Raspberry Pi - Challenge Your Understanding

Challenge - 5 Problems

❓ Predict Output

intermediate

Output of a simple IoT device authentication simulation

Consider this Python code simulating a Raspberry Pi IoT device checking a password before allowing access. What is the output when the password is 'secure123'?

Raspberry Pi

def authenticate(password):
    if password == 'secure123':
        return 'Access granted'
    else:
        return 'Access denied'

print(authenticate('secure123'))

A None

B Access denied

C Error: password not defined

D Access granted

💡 Hint

Check the condition comparing the password string.

The function compares the input password to the string 'secure123'. Since they match, it returns 'Access granted'.

🧠 Conceptual

intermediate

Why encrypt data on IoT devices?

Why is encrypting data important for deployed IoT devices?

A To make the device physically stronger

B To make data unreadable to unauthorized users

C To increase the device's processing speed

D To reduce the device's power consumption

💡 Hint

Think about protecting information from hackers.

Encryption changes data into a secret code so only authorized users can read it, protecting privacy and security.

🔧 Debug

advanced

Identify the error in this IoT device firmware update code

This code snippet is meant to check if a firmware update is valid by comparing version numbers. What error will it cause?

Raspberry Pi

current_version = '1.2.3'
new_version = '1.3.0'

if new_version > current_version:
    print('Update available')
else:
    print('No update')

A SyntaxError due to missing colon after else

B TypeError because versions are strings

C No output because condition is false

D RuntimeError due to invalid comparison

💡 Hint

Check the syntax of the if-else statement.

The else statement is missing a colon (:), causing a SyntaxError.

🚀 Application

advanced

Result of running this Raspberry Pi sensor data encryption code

What will be the output of this code that encrypts sensor data using a simple Caesar cipher with shift 3?

Raspberry Pi

def caesar_encrypt(text, shift):
    result = ''
    for char in text:
        if char.isalpha():
            base = ord('a') if char.islower() else ord('A')
            result += chr((ord(char) - base + shift) % 26 + base)
        else:
            result += char
    return result

sensor_data = 'Temp: 25C'
encrypted = caesar_encrypt(sensor_data, 3)
print(encrypted)

A Whps: 28F

B Temp: 25C

C Whps: 25F

D Error: unsupported operand type

💡 Hint

Look at how letters shift by 3 positions, numbers stay the same.

Each letter shifts 3 places forward: T->W, e->h, m->p, p->s. Numbers and symbols remain unchanged.

❓ Predict Output

expert

Output of this Raspberry Pi IoT device network security check

What is the output of this code that checks if a device IP is in the allowed list?

Raspberry Pi

allowed_ips = {'192.168.1.10', '192.168.1.11', '192.168.1.12'}
device_ip = '192.168.1.13'

if device_ip in allowed_ips:
    print('Device allowed')
else:
    print('Device blocked')

A Device blocked

B Device allowed

C KeyError

D SyntaxError

💡 Hint

Check if the device IP is in the set of allowed IPs.

The device IP '192.168.1.13' is not in the allowed_ips set, so it prints 'Device blocked'.

Practice

1. Why is it important to secure Raspberry Pi devices used in IoT projects?

easy

A. To reduce the device's power consumption

B. To make the device run faster

C. To prevent unauthorized access and protect data

D. To increase the device's screen brightness

Solution

1. Step 1: Understand the role of security in IoT

   Security helps keep devices safe from hackers and unauthorized users who might steal data or control the device.

2. Step 2: Identify the main goal of securing devices

   The main goal is to protect data and device functionality, not to affect speed, brightness, or power use.

3. Final Answer:

   To prevent unauthorized access and protect data -> Option C

4. Quick Check:

   Security protects devices = Prevent unauthorized access [OK]

Hint: Security means keeping strangers out and data safe [OK]

Common Mistakes:

• Confusing security with device performance
• Thinking security changes hardware features
• Ignoring data protection importance

2. Which of the following is the correct way to set a password on a Raspberry Pi to improve security?

easy

A. Use the command passwd and enter a strong password

B. Use the command setpassword with any password

C. Change the password by editing /etc/passwd manually

D. No need to set a password if the device is offline

Solution

1. Step 1: Identify the standard command for changing passwords

   The passwd command is the official and safe way to change passwords on Raspberry Pi.

2. Step 2: Evaluate other options for correctness

   setpassword is not a valid command; editing /etc/passwd manually is risky and not recommended; offline devices still need passwords for security.

3. Final Answer:

   Use the command passwd and enter a strong password -> Option A

4. Quick Check:

   Use passwd command = Correct password setting [OK]

Hint: Use the official passwd command for passwords [OK]

Common Mistakes:

• Trying to edit system files manually
• Using non-existent commands
• Assuming offline means no security needed

3. What will be the output of this Python code running on a Raspberry Pi that checks if a device is secure based on password strength?

password = 'abc123'
if len(password) >= 8 and any(c.isdigit() for c in password) and any(c.isalpha() for c in password):
    print('Secure')
else:
    print('Not Secure')

medium

A. Secure

B. Not Secure

C. SyntaxError

D. No output

Solution

1. Step 1: Check password length condition

   The password 'abc123' has length 6, which is less than 8, so the first condition fails.

2. Step 2: Evaluate the full if condition

   Since the length condition is false, the whole condition is false, so the else block runs.

3. Final Answer:

   Not Secure -> Option B

4. Quick Check:

   Password length < 8 = Not Secure [OK]

Hint: Check length first; less than 8 means not secure [OK]

Common Mistakes:

• Ignoring length check
• Assuming presence of digits and letters is enough
• Confusing syntax with logic errors

4. Find the error in this Raspberry Pi Python script that tries to block unauthorized IP addresses:

blocked_ips = ['192.168.1.10', '10.0.0.5']
user_ip = '192.168.1.10'
if user_ip = blocked_ips:
    print('Access Denied')
else:
    print('Access Granted')

medium

A. The comparison operator should be '==' instead of '='

B. The list blocked_ips should be a string

C. The variable user_ip should be a list

D. The print statements are missing parentheses

Solution

1. Step 1: Identify the syntax error in the if statement

   The code uses '=' which is assignment, but comparison needs '==' in Python.

2. Step 2: Confirm other parts are correct

   blocked_ips is correctly a list; user_ip is a string; print statements have parentheses, so no error there.

3. Final Answer:

   The comparison operator should be '==' instead of '=' -> Option A

4. Quick Check:

   Use '==' for comparison, not '=' [OK]

Hint: Use '==' to compare values, '=' assigns [OK]

Common Mistakes:

• Using '=' instead of '==' in conditions
• Confusing data types for variables
• Ignoring Python 3 print syntax

5. You want to secure a Raspberry Pi IoT device deployed in a public place. Which combination of actions best protects it from unauthorized access?

hard

A. Disable password login and leave all ports open for easy access

B. Connect the device to any available Wi-Fi without encryption

C. Use default passwords and disable automatic updates to avoid changes

D. Set a strong password, enable firewall rules, and keep software updated

Solution

1. Step 1: Identify best security practices for deployed IoT devices

   Strong passwords, firewall rules, and software updates help block unauthorized users and fix security holes.

2. Step 2: Evaluate other options for risks

   Disabling passwords or updates and using open Wi-Fi expose the device to attacks and data theft.

3. Final Answer:

   Set a strong password, enable firewall rules, and keep software updated -> Option D

4. Quick Check:

   Strong password + firewall + updates = Secure device [OK]

Hint: Combine password, firewall, and updates for best security [OK]

Common Mistakes:

• Thinking disabling passwords improves security
• Ignoring updates and firewall importance
• Using unsecured Wi-Fi networks