A security architect is designing a secure IoT deployment for a hospital. The devices include wearable patient monitors (BLE), infusion pumps (wired Ethernet), and a central management server. The architect must balance security with usability and cost. The hospital wants to minimize the risk of remote attacks while ensuring that medical staff can quickly access device data. Which approach best balances these requirements?

Rely solely on encryption for all communication

Segment the IoT devices onto a separate network and enforce strict access controls to the management server

Use a single flat network to simplify management and reduce cost

Disable all wireless interfaces on the wearable monitors to prevent remote attacks

An attacker has successfully exploited a vulnerability in a smart thermostat and gained root access. The attacker wants to maintain access even after the device reboots. Which post-exploitation technique would be most effective?

Deleting system logs to hide the intrusion

Modifying the device's startup scripts to execute a reverse shell

Changing the device's administrator password

Exfiltrating temperature data to an external server

A hospital is deploying IoT infusion pumps that must be remotely monitored. The security team wants to reduce the risk of network-based attacks while maintaining the ability to manage the devices. Which control is most effective for this goal?

Enable UPnP on the pumps to simplify network configuration.

Disable all network interfaces on the pumps and require manual data collection.

Use WPA2 encryption on the existing flat network.

Place the pumps on a dedicated VLAN with strict firewall rules that only allow traffic to the monitoring server.

EC-CouncilCertified Ethical Hacker

Domain 7Objective 4

IoT Attacks and Methodology CEH Practice Questions (Page 3)

Part of the Mobile, IoT and OT Hacking domain, which makes up ~11% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~10–18 in this domain), expect 2–4 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

9concepts

Questions 11–15

11expert · hard
A security architect is designing a secure IoT deployment for a hospital. The devices include wearable patient monitors (BLE), infusion pumps (wired Ethernet), and a central management server. The architect must balance security with usability and cost. The hospital wants to minimize the risk of remote attacks while ensuring that medical staff can quickly access device data. Which approach best balances these requirements?
Select an answer first
12application · medium
An attacker has successfully exploited a vulnerability in a smart thermostat and gained root access. The attacker wants to maintain access even after the device reboots. Which post-exploitation technique would be most effective?
Select an answer first
13foundation · easy
In the IoT attack methodology, which phase involves gathering information about the target device, such as its IP address, open ports, and running services?
Select an answer first
14application · medium
A hospital is deploying IoT infusion pumps that must be remotely monitored. The security team wants to reduce the risk of network-based attacks while maintaining the ability to manage the devices. Which control is most effective for this goal?
Select an answer first
15application · medium
During a penetration test of an IoT device, a tester discovers that the device's web interface allows the input of a username without proper sanitization. The tester submits the following string in the username field: `admin' OR '1'='1`. The device responds with an authenticated session. Which vulnerability was exploited?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

IoT Attacks and Methodology CEH Practice Questions (Page 3)

Questions 11–15

An attacker has successfully exploited a vulnerability in a smart thermostat and gained root access. The attacker wants to maintain access even after the device reboots. Which post-exploitation technique would be most effective?

In the IoT attack methodology, which phase involves gathering information about the target device, such as its IP address, open ports, and running services?

A hospital is deploying IoT infusion pumps that must be remotely monitored. The security team wants to reduce the risk of network-based attacks while maintaining the ability to manage the devices. Which control is most effective for this goal?

Keep studying — Mobile, IoT and OT Hacking