A company is deploying smart locks for office doors. The locks use Zigbee and are managed by a central hub. The security team wants to prevent unauthorized devices from joining the Zigbee network. Which control is most effective?

Place the Zigbee hub in a Faraday cage.

Disable Zigbee and use Wi-Fi instead.

Use a strong password on the central hub's web interface.

Enable Zigbee network key encryption and use a pre-configured allowlist of device MAC addresses.

A security consultant is performing a threat model for a new smart vending machine. The machine has a web-based admin interface, a Bluetooth Low Energy (BLE) payment reader, and a USB port for maintenance. Which attack surface is most likely to be exploited by an attacker who is physically near the machine but not connected to its network?

The BLE payment reader, because BLE is wireless and can be accessed from a short distance without physical contact.

The USB port, because it allows direct access to the device's storage.

The web-based admin interface, because it is exposed to the network.

The power supply, because it can be tampered with to cause a denial of service.

A company is deploying IoT devices that use MQTT for communication. The security team wants to implement a control that will prevent unauthorized devices from connecting to the broker. Which control is most effective?

Use a complex topic naming scheme

Use client certificates for mutual TLS authentication

Disable the broker's web console

A company is deploying IoT devices that use both BLE and MQTT. The security team wants to mitigate the risk of unauthorized access and data tampering. They have limited budget and must choose one control. Which control provides the most comprehensive mitigation?

Use a firewall to block all incoming traffic to the devices

Disable BLE and use only MQTT for all communication

Implement strong authentication and encryption for both BLE and MQTT

EC-CouncilCertified Ethical Hacker

Domain 7Objective 4

IoT Attacks and Methodology CEH Practice Questions (Page 4)

Part of the Mobile, IoT and OT Hacking domain, which makes up ~11% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~10–18 in this domain), expect 2–4 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

9concepts

Questions 16–20

16application · medium
A company is deploying smart locks for office doors. The locks use Zigbee and are managed by a central hub. The security team wants to prevent unauthorized devices from joining the Zigbee network. Which control is most effective?
Select an answer first
17application · medium
A security consultant is performing a threat model for a new smart vending machine. The machine has a web-based admin interface, a Bluetooth Low Energy (BLE) payment reader, and a USB port for maintenance. Which attack surface is most likely to be exploited by an attacker who is physically near the machine but not connected to its network?
Select an answer first
18foundation · easy
After compromising an IoT device, which post-exploitation activity involves installing a backdoor or modifying the firmware to maintain access?
Select an answer first
19application · medium
A company is deploying IoT devices that use MQTT for communication. The security team wants to implement a control that will prevent unauthorized devices from connecting to the broker. Which control is most effective?
Select an answer first
20expert · hard
A company is deploying IoT devices that use both BLE and MQTT. The security team wants to mitigate the risk of unauthorized access and data tampering. They have limited budget and must choose one control. Which control provides the most comprehensive mitigation?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

IoT Attacks and Methodology CEH Practice Questions (Page 4)

Questions 16–20

A company is deploying smart locks for office doors. The locks use Zigbee and are managed by a central hub. The security team wants to prevent unauthorized devices from joining the Zigbee network. Which control is most effective?

After compromising an IoT device, which post-exploitation activity involves installing a backdoor or modifying the firmware to maintain access?

A company is deploying IoT devices that use MQTT for communication. The security team wants to implement a control that will prevent unauthorized devices from connecting to the broker. Which control is most effective?

A company is deploying IoT devices that use both BLE and MQTT. The security team wants to mitigate the risk of unauthorized access and data tampering. They have limited budget and must choose one control. Which control provides the most comprehensive mitigation?

Keep studying — Mobile, IoT and OT Hacking