Endpoint Security IoT Devices CND Practice Questions (Page 11)

Questions 51–53

1. 51expert · hard

   A manufacturing plant uses IoT sensors on robotic arms. The sensors are in a restricted area, but a recent incident showed that a contractor was able to physically access a sensor and replace its firmware with malicious code. The plant wants to prevent this from happening again. Which control is most effective?

   • AImplement a secure boot process that verifies the firmware signature on every boot.
   • BIncrease physical security by adding locks and access control to the restricted area.
   • CMonitor the sensors for anomalous behavior.
   • DChange the default password on the sensors.
   Reveal Solution Discussion Select an answer first
2. 52application · medium

   A smart-building vendor supplies IoT controllers that can be updated over the internet. The building manager wants to ensure that only authentic firmware from the vendor can be installed. Which mechanism should the vendor implement?

   • ARequire the device to be physically connected to a laptop for updates.
   • BPublish firmware updates on a public website without any protection.
   • CUse a custom encryption algorithm to obfuscate the firmware image.
   • DDigitally sign each firmware image and have the device verify the signature before applying the update.
   Reveal Solution Discussion Select an answer first
3. 53application · medium

   A security analyst notices that a group of IoT devices in a factory is sending a large volume of traffic to an external IP address at odd hours. The devices normally communicate only with the local gateway. What is the MOST likely explanation?

   • AThe devices are experiencing a network misconfiguration.
   • BThe devices are part of a botnet and are communicating with a command-and-control server.
   • CThe devices are performing a firmware update from the vendor.
   • DThe devices are sending routine telemetry data.
   Reveal Solution Discussion Select an answer first