Which practice is recommended to reduce the attack surface of an IoT device?

Using the same password for all devices for simplicity

Keeping all services enabled for maximum functionality

Disabling firmware updates to maintain stability

A company uses IoT devices that support secure boot. The security team wants to ensure that only trusted firmware can run on the devices. Which additional control is MOST important to complement secure boot?

Monitor the devices' network traffic.

Use signed firmware updates that the device verifies before installation.

Disable the devices' debug interfaces.

Place the devices on a separate VLAN.

What is the primary purpose of network segmentation for IoT devices?

To increase the speed of the network

To simplify IP address management

To allow all devices to communicate freely

To isolate IoT devices from critical systems and limit lateral movement

A smart building's lighting controllers use MQTT to report status to a central broker. The security team notices that the controllers are connecting to an unknown broker IP address during off-hours. Which type of IoT attack is most likely occurring?

The controllers are experiencing a denial-of-service attack that floods the legitimate broker.

The controllers are performing a firmware update from an unapproved vendor server.

The controllers have been compromised and are exfiltrating data or receiving commands from a rogue MQTT broker.

The controllers are broadcasting their presence via Bluetooth to nearby devices.

EC-CouncilCertified Network Defender

Domain 2Objective 5

Endpoint Security IoT Devices CND Practice Questions (Page 3)

Part of the Perimeter and Endpoint Security domain, which makes up ~24% of our current practice bank.

53questions here

11free pages

9concepts

Questions 11–15

11foundation · easy
Which practice is recommended to reduce the attack surface of an IoT device?
Select an answer first
12application · medium
A company uses IoT devices that support secure boot. The security team wants to ensure that only trusted firmware can run on the devices. Which additional control is MOST important to complement secure boot?
Select an answer first
13foundation · easy
What is the primary purpose of network segmentation for IoT devices?
Select an answer first
14application · medium
A smart building's lighting controllers use MQTT to report status to a central broker. The security team notices that the controllers are connecting to an unknown broker IP address during off-hours. Which type of IoT attack is most likely occurring?
Select an answer first
15foundation · easy
Which framework provides guidelines and best practices for IoT security, including recommendations for secure development, deployment, and lifecycle management?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CND

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CND” is a trademark of its owner, used for identification only.