A smart building management system uses IoT controllers that are installed in accessible ceiling spaces. The controllers have a debug UART port on the circuit board, and the firmware is not signed. A security consultant warns that an attacker could extract firmware and reverse-engineer it. Which combination of controls would best mitigate this risk?

Disable the debug UART port and implement secure boot with signed firmware

Use a stronger password for the web interface of the controllers

Apply firmware updates regularly

Encrypt all network traffic between the controllers and the central server

A smart agriculture company deploys soil moisture sensors in a field. The sensors collect data and send it to a cloud application via a gateway. The gateway uses MQTT to publish sensor data to a broker. The security team wants to ensure that sensor data is not tampered with during transmission. Which control should be implemented at the gateway?

Implement a firewall on the gateway to block incoming traffic

Use MQTT over TLS with client certificates for mutual authentication

Use a VPN tunnel between the gateway and the cloud

Use MQTT QoS 2 to guarantee message delivery

A nuclear power plant's OT network uses a legacy DCS with proprietary protocols. The plant is required to comply with NERC CIP. A recent audit found that the DCS has no logging capability. The security team proposes adding a passive network tap to monitor traffic. The operations team is concerned about the tap affecting the network's reliability. Which approach best satisfies both security and reliability?

Install an active tap that can filter traffic

Use a span port on the switch to mirror traffic

Install a passive optical tap that does not introduce a point of failure

Disable the DCS and use manual logging

EC-CouncilCertified Cybersecurity Technician

Domain 4Objective 4

IoT and OT Security CCT Practice Questions (Page 3)

Part of the Cloud, Wireless, Mobile, and IoT/OT Security domain, which makes up ~17% of our current practice bank.

51questions here

11free pages

12concepts

Questions 11–15

11foundation · easy
In risk management, what is the term for the potential for loss or damage when a threat exploits a vulnerability?
Select an answer first
12application · medium
A smart building management system uses IoT controllers that are installed in accessible ceiling spaces. The controllers have a debug UART port on the circuit board, and the firmware is not signed. A security consultant warns that an attacker could extract firmware and reverse-engineer it. Which combination of controls would best mitigate this risk?
Select an answer first
13application · medium
A smart agriculture company deploys soil moisture sensors in a field. The sensors collect data and send it to a cloud application via a gateway. The gateway uses MQTT to publish sensor data to a broker. The security team wants to ensure that sensor data is not tampered with during transmission. Which control should be implemented at the gateway?
Select an answer first
14foundation · easy
Which OT security best practice involves dividing the network into separate zones to limit the spread of an attack?
Select an answer first
15expert · hard
A nuclear power plant's OT network uses a legacy DCS with proprietary protocols. The plant is required to comply with NERC CIP. A recent audit found that the DCS has no logging capability. The security team proposes adding a passive network tap to monitor traffic. The operations team is concerned about the tap affecting the network's reliability. Which approach best satisfies both security and reliability?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCT” is a trademark of its owner, used for identification only.

IoT and OT Security CCT Practice Questions (Page 3)

Questions 11–15

In risk management, what is the term for the potential for loss or damage when a threat exploits a vulnerability?

Which OT security best practice involves dividing the network into separate zones to limit the spread of an attack?

Keep studying — Cloud, Wireless, Mobile, and IoT/OT Security