IoT Device Security ECSS Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A security analyst is monitoring IoT devices and notices that a smart meter is sending data to an IP address that is known to be associated with a botnet. The smart meter is critical for billing, and disconnecting it would cause a loss of revenue. What should the analyst do?

   • ADisconnect the smart meter from the network immediately.
   • BBlock the communication to the botnet IP while keeping the smart meter operational.
   • CIgnore the communication because the smart meter is still functioning.
   • DChange the smart meter's IP address to avoid the block.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A security analyst is monitoring a network that includes IoT devices such as smart TVs, printers, and VoIP phones. The analyst notices that one of the smart TVs is sending a large amount of data to an external IP address that is not associated with the TV manufacturer. What should the analyst do?

   • ADisconnect the TV from the network immediately.
   • BInvestigate the traffic to determine if the TV is sending data to a known malicious destination.
   • CBlock the external IP address and assume the TV is compromised.
   • DIgnore the traffic because smart TVs are known to send telemetry data.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A logistics company uses IoT trackers on shipping containers. The trackers communicate over cellular networks and have a web-based management portal. The company wants to ensure that only authorized personnel can access the management portal and that the trackers' firmware is up to date. Which combination of best practices should be implemented?

   • AAllow portal access from any IP address and manually update firmware when convenient.
   • BRely on the cellular provider's security and do not change portal settings.
   • CEnforce multi-factor authentication (MFA) for the portal and enable automatic firmware updates.
   • DUse a shared account for all administrators and disable firmware updates to avoid downtime.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A university campus has deployed smart lighting systems that use Zigbee. The network team is setting up monitoring to detect compromised light bulbs that might be used to launch attacks on other devices. Which monitoring data source would be most useful?

   • APhysical inspection reports of the light fixtures.
   • BZigbee network traffic logs showing communication patterns between bulbs and the gateway.
   • CPower usage logs from the electrical panel for each light circuit.
   • DManufacturer's firmware release notes.
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A city is deploying smart streetlights that are connected to a central management system. The streetlights are critical for public safety, and any downtime is unacceptable. The security team wants to ensure that the streetlights cannot be used as an entry point into the city's broader network. Which design should be implemented?

   • AUse the same credentials for all streetlights to simplify management.
   • BDisable all remote management features to prevent unauthorized access.
   • CConnect the streetlights directly to the city's main network for easier management.
   • DPlace the streetlights on a separate network segment with a firewall that only allows necessary management traffic.
   Reveal Solution Discussion Select an answer first