Endpoint Security IoT Devices CND Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A company is deploying IoT devices in a healthcare setting and wants to align with industry best practices. Which standard or framework is most directly applicable to securing IoT devices in this context?

   • AHIPAA, which applies to protected health information.
   • BOWASP IoT Top 10, which provides a list of the most critical security risks for IoT devices.
   • CPCI DSS, which applies to payment card data.
   • DISO 27001, which is an information security management standard.
   Reveal Solution Discussion Select an answer first
2. 32application · easy

   A small business deploys IP cameras that come with a default admin password. The cameras are directly accessible from the internet. Which action should the business take FIRST to secure these cameras?

   • AApply the latest firmware updates.
   • BDisable the cameras' web interfaces entirely.
   • CChange the default password on every camera to a unique, strong password.
   • DPlace the cameras on a separate VLAN.
   Reveal Solution Discussion Select an answer first
4. 33expert · hard

   A company installs IoT sensors in a public area. The sensors are enclosed in a plastic housing that can be opened with a standard screwdriver. The sensors contain a debug port that allows full access to the device's firmware. Which combination of controls would BEST mitigate the risk of physical tampering?

   • AUse tamper-evident screws and disable the debug port in firmware.
   • BSet strong passwords on the sensors' web interfaces.
   • CPlace the sensors on a separate VLAN.
   • DMonitor the sensors' network traffic for anomalies.
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   What is the primary purpose of monitoring and logging IoT device activity?

   • ATo detect anomalous behavior and security incidents
   • BTo reduce network traffic
   • CTo replace the need for firmware updates
   • DTo improve device performance
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   Which of the following is a fundamental best practice for securing IoT devices before deploying them on a network?

   • APlacing devices on the same network as critical systems for easier management
   • BChanging default credentials
   • CEnabling all services for functionality
   • DDisabling firmware updates to prevent changes
   Reveal Solution Discussion Select an answer first