IoT Device Security ECSS Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A retail chain has deployed IoT sensors to monitor refrigeration units in its stores. The sensors are connected to the corporate network and send temperature data to a central server. The security team wants to ensure that a compromised sensor cannot be used to access other parts of the network. Which control is MOST effective?

   • ADisable the sensors' web interfaces.
   • BChange the default passwords on all sensors.
   • CPlace the sensors on a separate network segment with strict access control lists.
   • DMonitor the sensors' network traffic for anomalies.
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A company uses IoT-enabled vending machines that accept credit card payments. The machines communicate with a payment processor over the internet. A security assessment reveals that the machines use unencrypted HTTP for payment transactions. What is the MOST significant risk associated with this finding?

   • AThe machines could be infected with ransomware.
   • BPayment card data could be intercepted and stolen by an attacker on the network path.
   • CThe machines could be used as a botnet to launch DDoS attacks.
   • DThe machines' firmware could be updated with malicious code.
   Reveal Solution Discussion Select an answer first
4. 33expert · hard

   A company has IoT devices that are vulnerable to a known firmware exploit. The vendor has released a patch, but applying it requires a reboot that will cause a brief service interruption. The devices are used in a production environment where downtime is costly. What is the BEST course of action?

   • AApply the patch immediately without regard for the interruption.
   • BApply the patch during a planned maintenance window to minimize disruption.
   • CWait for the next scheduled maintenance window, even if it is months away.
   • DDo not apply the patch to avoid any downtime.
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   What is the primary purpose of IoT device security in the context of network defense?

   • ATo replace traditional network firewalls with IoT-specific hardware
   • BTo protect IoT devices from being compromised and prevent them from being used as entry points into the network
   • CTo increase the number of IoT devices connected to the network for better data collection
   • DTo ensure IoT devices can communicate with each other without encryption
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A company is deploying IoT devices that will be installed in remote locations with intermittent internet connectivity. The devices need to receive security updates, but the connection is unreliable. What is the best approach to ensure the devices stay secure?

   • ASkip updates until the devices are brought back to a central location.
   • BUse a local update server that caches updates and pushes them when devices are online.
   • CUse a mesh network to distribute updates between devices.
   • DRequire each device to download updates directly from the vendor's cloud.
   Reveal Solution Discussion Select an answer first