A city deploys smart streetlights that use a proprietary wireless protocol. Each light has a small microcontroller with limited memory and no hardware cryptographic acceleration. The vendor provides firmware updates via an unauthenticated HTTP download. The security team wants to ensure that only authentic firmware can be installed. What is the most practical approach given the device constraints?

Use a VPN to protect the firmware download

Require a strong password on the streetlight's web interface

Implement a secure boot process that verifies a digital signature on the firmware before installation

Disable automatic firmware updates and require manual installation

A hospital is deploying a large number of IoT infusion pumps that connect to the network via Wi-Fi. The pumps run a proprietary operating system that cannot be patched automatically, and they transmit patient data. The security team needs to reduce the risk of a compromised pump being used to move laterally to other hospital systems. Which control is most effective?

Require all pump data to be encrypted with AES-256

Place the pumps on a separate VLAN with strict firewall rules that only allow communication with the pump management server

Implement a host-based intrusion detection system on each pump

Disable the Wi-Fi on the pumps and use only Bluetooth for data transmission

EC-CouncilCertified Cybersecurity Technician

Domain 4Objective 4

IoT and OT Security CCT Practice Questions (Page 2)

Part of the Cloud, Wireless, Mobile, and IoT/OT Security domain, which makes up ~17% of our current practice bank.

51questions here

11free pages

12concepts

Questions 6–10

6application · medium
A city deploys smart streetlights that use a proprietary wireless protocol. Each light has a small microcontroller with limited memory and no hardware cryptographic acceleration. The vendor provides firmware updates via an unauthenticated HTTP download. The security team wants to ensure that only authentic firmware can be installed. What is the most practical approach given the device constraints?
Select an answer first
7foundation · easy
Which model is commonly used to describe the hierarchical levels of an operational technology (OT) environment, from physical processes to enterprise systems?
Select an answer first
8foundation · easy
Which type of industrial control system is typically used to monitor and control geographically dispersed assets, such as pipelines or power grids, using remote communication?
Select an answer first
9foundation · easy
Which IoT security best practice involves regularly applying patches and fixes to address known vulnerabilities in device software?
Select an answer first
10application · medium
A hospital is deploying a large number of IoT infusion pumps that connect to the network via Wi-Fi. The pumps run a proprietary operating system that cannot be patched automatically, and they transmit patient data. The security team needs to reduce the risk of a compromised pump being used to move laterally to other hospital systems. Which control is most effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCT” is a trademark of its owner, used for identification only.

IoT and OT Security CCT Practice Questions (Page 2)

Questions 6–10

Which model is commonly used to describe the hierarchical levels of an operational technology (OT) environment, from physical processes to enterprise systems?

Which type of industrial control system is typically used to monitor and control geographically dispersed assets, such as pipelines or power grids, using remote communication?

Which IoT security best practice involves regularly applying patches and fixes to address known vulnerabilities in device software?

Keep studying — Cloud, Wireless, Mobile, and IoT/OT Security