Endpoint Security IoT Devices CND Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A developer is designing a new IoT device for a smart agriculture application. The device will collect soil moisture data and send it to a cloud server. The device has limited processing power and battery. Which architectural choice would best support security without compromising the device's constraints?

   • AUse a heavy encryption algorithm on the device to protect data at rest.
   • BRely on the cloud server to encrypt all data after it is received.
   • CUse a lightweight communication protocol like MQTT with TLS encryption for data in transit.
   • DImplement a complex firewall on the device itself.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which regulation is primarily concerned with the protection of personal data and privacy, and may apply to IoT devices that collect personal data?

   • AHIPAA
   • BGDPR
   • CISO 27001
   • DPCI DSS
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A utility company has smart meters that are deployed in the field and connect back to a central system. The vendor has released a critical firmware update, but the update requires the meters to be physically accessed to install. The company has thousands of meters spread across a wide area. Which approach best balances the need to patch the vulnerability with operational constraints?

   • APrioritize updating meters that are in high-risk locations or have shown signs of tampering, and implement compensating controls such as network monitoring for all meters.
   • BDisconnect all meters from the network until they can be updated.
   • CRely on the vendor to provide a remote update mechanism, even though it is not currently available.
   • DWait until all meters can be updated at once to ensure consistency.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A security analyst is investigating a suspected IoT botnet infection. The analyst finds that the IoT devices have default credentials and are directly exposed to the internet. Which combination of actions should the analyst recommend to remediate the infection and prevent recurrence?

   • AChange all default credentials, isolate the devices on a separate network, and monitor for unusual outbound traffic.
   • BBlock all outbound traffic from the devices.
   • CReboot the devices and restore factory settings.
   • DApply the latest firmware updates only.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which of the following is an example of a monitoring mechanism that can be used to detect anomalous behavior in IoT devices?

   • AAnalyzing network traffic patterns
   • BPlacing all devices on the same network segment
   • CUsing default credentials for all devices
   • DDisabling logging to save storage
   Reveal Solution Discussion Select an answer first