What is the purpose of monitoring IoT device activity in a network?

To detect unusual behavior that may indicate a security incident or compromise

To replace the need for firmware updates

To automatically change device passwords without user intervention

To increase the number of devices connected to the network

Which of the following is a common vulnerability found in many IoT devices?

Use of strong, unique passwords set by the manufacturer

Encrypted communication by default

Default credentials that are easy to guess and rarely changed

Regular automatic firmware updates

A city's traffic management system uses IoT sensors to monitor vehicle flow. The system is critical and must remain available. The security team wants to monitor for anomalies without disrupting operations. Which approach is best?

Deploy passive network monitoring on the sensor network.

Replace sensors with newer models that have built-in monitoring.

Configure active vulnerability scans on all sensors daily.

Disable the sensors' network access and rely on manual inspection.

A security analyst is investigating a smart building's IoT network. The analyst finds that some devices are communicating with a known botnet C2 server, but the devices are also sending legitimate data to the building management system. The analyst must stop the malicious communication without disrupting building operations. What is the best action?

Block the C2 server IP at the firewall and monitor for any impact.

Change the devices' default credentials and reboot them.

Disconnect all affected devices from the network immediately.

Update the devices' firmware to the latest version.

Why is regularly updating IoT device firmware considered a security best practice?

To patch known security vulnerabilities and improve device resilience against attacks

To change the device's default IP address automatically

To add new features that increase the device's processing speed

To ensure the device remains compatible with older network protocols

EC-CouncilCertified Security Specialist

Domain 2Objective 4

IoT Device Security ECSS Practice Questions (Page 3)

Part of the Network Defense Systems and Monitoring domain, which makes up ~14% of our current practice bank.

44questions here

9free pages

5concepts

Questions 11–15

11foundation · easy
What is the purpose of monitoring IoT device activity in a network?
Select an answer first
12foundation · easy
Which of the following is a common vulnerability found in many IoT devices?
Select an answer first
13application · medium
A city's traffic management system uses IoT sensors to monitor vehicle flow. The system is critical and must remain available. The security team wants to monitor for anomalies without disrupting operations. Which approach is best?
Select an answer first
14expert · hard
A security analyst is investigating a smart building's IoT network. The analyst finds that some devices are communicating with a known botnet C2 server, but the devices are also sending legitimate data to the building management system. The analyst must stop the malicious communication without disrupting building operations. What is the best action?
Select an answer first
15foundation · easy
Why is regularly updating IoT device firmware considered a security best practice?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECSS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECSS” is a trademark of its owner, used for identification only.