IoT Device Security ECSS Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A security analyst is reviewing logs from a smart lighting system in an office building. The logs show that the lighting controller attempted to log in to a file server using a username and password that match the default credentials for the lighting system. What does this indicate?

   • AThe lighting system is attempting to update its firmware from the file server.
   • BThe lighting system is performing a routine backup of its configuration.
   • CThe lighting system may be compromised and is being used to probe the network for other devices.
   • DThe lighting system is experiencing a network misconfiguration.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company has deployed IoT sensors in a remote field for environmental monitoring. The sensors communicate via a low-power wide-area network (LPWAN) to a central gateway. The security team wants to protect the sensors from being hijacked and used in a botnet. Which measure is MOST effective?

   • ADisable all remote management features on the sensors.
   • BUse a proprietary communication protocol that is not publicly documented.
   • CEnsure the sensors use strong authentication and encrypted communication with the gateway.
   • DRely on the LPWAN provider's security features.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A company is deploying smart locks across its offices. The locks support firmware updates, but the update process requires the locks to be taken offline for 10 minutes. The company wants to maintain security without disrupting office access during business hours. What is the best approach?

   • ASchedule firmware updates during off-hours and stage the rollout in phases.
   • BUse the locks' physical key override during updates.
   • CSkip firmware updates to avoid downtime.
   • DUpdate all locks immediately during business hours to ensure security.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which of the following is an example of an anomaly that IoT network monitoring might detect?

   • AA smart thermostat sending a small amount of data to its vendor's cloud service
   • BA security camera suddenly communicating with an unknown external IP address at a high volume
   • CA smart light bulb receiving a firmware update from the manufacturer
   • DAn IoT sensor sending periodic readings to a local gateway
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A security team is responding to a botnet infection that has compromised several IoT devices. The devices are critical to operations and cannot be taken offline. The team needs to stop the botnet communication while keeping the devices operational. What is the best approach?

   • AReimage the devices with a clean firmware image.
   • BChange the devices' default credentials and hope the botnet stops.
   • CBlock the botnet C2 domains and IPs at the firewall and monitor for alternative communication.
   • DDisconnect the devices from the network and use manual controls.
   Reveal Solution Discussion Select an answer first