Endpoint Security IoT Devices CND Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   A hospital has a mix of IoT medical devices, some of which are legacy and cannot be patched. The devices must remain on the network for patient care. The security team wants to reduce the risk of these devices being exploited while maintaining their functionality. Which approach is the BEST balance of security and operational requirements?

   • AApply virtual patches using an intrusion prevention system (IPS) inline.
   • BPlace the legacy devices in a separate VLAN with strict firewall rules that only allow necessary communication with specific systems.
   • CDisconnect the legacy devices from the network and use manual data collection.
   • DReplace all legacy devices with modern, patched devices immediately.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   In a typical IoT device, which component is responsible for executing the device's firmware and managing the overall operation of the device?

   • ASensor
   • BActuator
   • CProcessing unit
   • DCommunication module
   Reveal Solution Discussion Select an answer first
4. 28application · easy

   A security analyst is reviewing a new IoT device that uses a low-power microcontroller, a temperature sensor, and a Zigbee radio. The device sends data to a central gateway. Which statement about this device's architecture is accurate?

   • AThe microcontroller is the processing unit, the temperature sensor is the sensor, and the Zigbee radio is the communication module.
   • BThe device has no processing unit because it uses Zigbee.
   • CThe temperature sensor is the actuator, and the microcontroller is the sensor.
   • DThe Zigbee radio is the processing unit, and the microcontroller is the communication module.
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A company's IoT devices use MQTT to communicate with a central broker. The security team has noticed that some devices are sending messages to a topic that is not used by the application. The messages contain small amounts of data that appear to be encoded. The team suspects data exfiltration. Which action would be most effective to confirm the suspicion and stop the exfiltration?

   • ADisable MQTT on all devices and switch to CoAP.
   • BIncrease the logging level on the broker to capture all messages, but take no further action.
   • CInspect the MQTT topic and payloads for the suspicious devices, then block the devices' access to the broker if malicious activity is confirmed.
   • DBlock all outbound traffic from the IoT network to the internet.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A company deploys smart thermostats that include a temperature sensor, a Wi-Fi module, and a microcontroller. The security team wants to reduce the risk of firmware tampering. Which architectural feature would most directly support this goal?

   • AA second temperature sensor for redundancy.
   • BA secure boot process that verifies the firmware signature before the microcontroller executes it.
   • CA faster Wi-Fi module to download updates more quickly.
   • DA larger battery to ensure the device stays powered during firmware updates.
   Reveal Solution Discussion Select an answer first