Which of the following is a primary component of an IoT device that often presents an attack surface through its debug interfaces and configuration pins?

The printed circuit board (PCB)

A security analyst is investigating a suspected rogue IoT device on a network. The analyst has captured network traffic and wants to identify the device type. Which technique is most effective?

Use a port scan on the captured traffic to identify open ports.

Analyze the captured traffic for unique protocol signatures, such as MQTT topics or CoAP URIs.

Send a ping to the device's IP address.

Look up the MAC address in a public database.

An IoT penetration tester is assessing a smart factory. The tester has completed reconnaissance and scanning, and has identified a PLC with a known unauthenticated remote code execution vulnerability. However, exploiting the vulnerability could cause the PLC to crash, disrupting production. The client has stated that production downtime must be minimized. What should the tester do?

Exploit the vulnerability on the production PLC during a scheduled maintenance window

Skip the exploitation test and only report the vulnerability as a finding

Exploit the vulnerability in a test environment that mirrors the PLC's configuration

Exploit the vulnerability immediately to confirm the risk, then restore the PLC

EC-CouncilCertified Ethical Hacker

Domain 7Objective 4

IoT Attacks and Methodology CEH Practice Questions (Page 6)

Part of the Mobile, IoT and OT Hacking domain, which makes up ~11% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~10–18 in this domain), expect 2–4 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

9concepts

Questions 26–30

26foundation · easy
Which of the following is a primary component of an IoT device that often presents an attack surface through its debug interfaces and configuration pins?
Select an answer first
27foundation · easy
Which post-exploitation activity involves using a compromised IoT device as a pivot point to attack other devices on the network?
Select an answer first
28foundation · easy
Which phase of the IoT attack methodology involves actively probing the target device to identify vulnerabilities that can be exploited?
Select an answer first
29application · medium
A security analyst is investigating a suspected rogue IoT device on a network. The analyst has captured network traffic and wants to identify the device type. Which technique is most effective?
Select an answer first
30expert · hard
An IoT penetration tester is assessing a smart factory. The tester has completed reconnaissance and scanning, and has identified a PLC with a known unauthenticated remote code execution vulnerability. However, exploiting the vulnerability could cause the PLC to crash, disrupting production. The client has stated that production downtime must be minimized. What should the tester do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

IoT Attacks and Methodology CEH Practice Questions (Page 6)

Questions 26–30

Which of the following is a primary component of an IoT device that often presents an attack surface through its debug interfaces and configuration pins?

Which post-exploitation activity involves using a compromised IoT device as a pivot point to attack other devices on the network?

Which phase of the IoT attack methodology involves actively probing the target device to identify vulnerabilities that can be exploited?

A security analyst is investigating a suspected rogue IoT device on a network. The analyst has captured network traffic and wants to identify the device type. Which technique is most effective?

Keep studying — Mobile, IoT and OT Hacking