What is the purpose of secure boot in IoT devices?

To ensure that only trusted firmware is loaded during startup

To encrypt all data stored on the device

To allow any firmware to run without verification

A smart agriculture company uses LoRaWAN for IoT sensors spread across a large farm. The sensors send data to a central gateway. The security team is concerned about eavesdropping on the wireless communication. Which control is MOST effective to protect the data in transit?

Switch to a different LoRaWAN frequency band.

Place the sensors on a separate VLAN.

Enable encryption at the application layer, such as using AES-encrypted payloads.

Use a stronger antenna to improve signal strength.

Which practice ensures that firmware updates are authentic and have not been tampered with?

Automatic updates without verification

A company has deployed IoT sensors that are managed through a web interface. The sensors are located in a remote facility with limited IT staff. The security team wants to ensure that the sensors are not left with default credentials. Which approach is most practical?

Disable the web interface on all sensors.

Require a strong, unique password to be set during initial deployment and enforce periodic password changes.

Rely on the vendor's default password because the sensors are on a separate network.

Use the same strong password for all sensors to simplify management.

EC-CouncilCertified Network Defender

Domain 2Objective 5

Endpoint Security IoT Devices CND Practice Questions (Page 10)

Part of the Perimeter and Endpoint Security domain, which makes up ~24% of our current practice bank.

53questions here

11free pages

9concepts

Questions 46–50

46foundation · easy
What is the purpose of secure boot in IoT devices?
Select an answer first
47expert · hard
A smart agriculture company uses LoRaWAN for IoT sensors spread across a large farm. The sensors send data to a central gateway. The security team is concerned about eavesdropping on the wireless communication. Which control is MOST effective to protect the data in transit?
Select an answer first
48application · medium
A company that processes credit card payments wants to deploy IoT devices that handle payment data. Which standard is MOST directly applicable to securing these devices?
Select an answer first
49foundation · easy
Which practice ensures that firmware updates are authentic and have not been tampered with?
Select an answer first
50application · medium
A company has deployed IoT sensors that are managed through a web interface. The sensors are located in a remote facility with limited IT staff. The security team wants to ensure that the sensors are not left with default credentials. Which approach is most practical?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CND

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CND” is a trademark of its owner, used for identification only.