IoT Device Security ECSS Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A logistics company uses GPS trackers on its fleet. The trackers communicate over cellular networks and have a web-based management portal. The company wants to ensure the trackers are not easily compromised. Which combination of practices is most effective?

   • AUse strong unique passwords for each tracker and enable encryption for all communications.
   • BUse the same strong password for all trackers to simplify management.
   • CDisable the web portal and manage trackers only via SMS commands.
   • DRely on the cellular provider's network security to protect the trackers.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A manufacturing plant has deployed hundreds of IP cameras on the production floor. The cameras were installed with their factory-default admin passwords. The network team notices a sudden spike in outbound traffic from the camera subnet to a known malicious IP address. What is the most immediate and effective action to contain the threat?

   • AUpdate the camera firmware to the latest version and reboot all cameras.
   • BDisconnect the cameras from the network and leave them offline until a firmware update is available.
   • CBlock the malicious IP at the firewall and change all camera default credentials.
   • DEnable DHCP snooping on the camera VLAN to prevent IP spoofing.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Which attack vector involves an attacker taking control of many IoT devices to launch large-scale attacks?

   • ASQL injection
   • BPhishing
   • CBotnet
   • DMan-in-the-middle
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A security analyst is responsible for monitoring a network with thousands of IoT devices. The analyst has limited time and needs to identify which devices are most likely to be compromised. Which approach is MOST efficient?

   • AMonitor all devices equally with the same level of scrutiny.
   • BPrioritize monitoring based on device criticality and known vulnerabilities.
   • CDisable monitoring for low-priority devices to save time.
   • DOnly monitor devices that have been involved in past incidents.
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Which of the following is a best practice for securing IoT devices?

   • ADisabling automatic firmware updates to prevent changes
   • BChanging default credentials to strong, unique passwords
   • CConnecting devices directly to the internet without a firewall
   • DKeeping default usernames and passwords to avoid configuration errors
   Reveal Solution Discussion Select an answer first