Endpoint Security IoT Devices CND Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A hospital uses smart infusion pumps that receive firmware updates from the vendor. The security team wants to ensure that only authentic, untampered firmware can be installed on the pumps. Which control is most directly aligned with this requirement?

   • AVerify that each firmware update is digitally signed by the vendor and that the device verifies the signature before installation.
   • BRequire a strong administrator password on the pump's management interface.
   • CDisable the pumps' USB ports to prevent physical firmware loading.
   • DMonitor network traffic from the pumps for unusual outbound connections.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A retail chain installs smart shelves that use default credentials and have an open debug port. The shelves are placed in customer-accessible areas and connected to the store's main Wi-Fi. Which combination of actions should the network defender prioritize to reduce the risk of a customer tampering with the shelves and pivoting into the corporate network?

   • AEnable the debug port for troubleshooting and monitor the shelves' traffic with a packet analyzer.
   • BMove the shelves to a wired connection and disable Wi-Fi on the devices.
   • CChange default credentials, disable the debug port, and place the shelves on a separate VLAN with no route to the corporate network.
   • DApply a firmware update and set a complex password on the management interface.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which network device is commonly used to enforce network segmentation by controlling traffic between different segments?

   • ARepeater
   • BSwitch
   • CFirewall
   • DHub
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A smart-home device uses Bluetooth Low Energy (BLE) to communicate with a mobile app. A security researcher finds that the BLE pairing process does not require authentication, allowing any nearby device to connect. Which control would BEST mitigate this vulnerability?

   • AIncrease the BLE transmission power to improve signal range.
   • BUse a different BLE advertising interval.
   • CDisable BLE and use only Wi-Fi.
   • DEnable BLE pairing with a passkey or numeric comparison to require authentication.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A company has deployed IoT devices across multiple sites. The security team wants to set up monitoring to detect anomalies, but the devices generate a high volume of low-level telemetry. The team is concerned about alert fatigue. Which approach best balances detection capability with manageable alert volumes?

   • AAlert on every log entry from every IoT device.
   • BUse a SIEM to collect all logs but only review them monthly.
   • CDisable logging for low-level telemetry and only log security events.
   • DImplement a baseline of normal behavior for each device type and alert only on deviations from that baseline.
   Reveal Solution Discussion Select an answer first