IoT and OT Attacks and Countermeasures EHE Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A water treatment facility uses a SCADA system with legacy PLCs that communicate over an unencrypted serial protocol. The control network is connected to the corporate network for reporting purposes. The facility manager wants to improve security without disrupting operations. Which action should be prioritized?

   • ADisconnect the corporate network entirely and use removable media for reporting.
   • BImplement a firewall and one-way data diode between the corporate and control networks.
   • CEnable encryption on the serial protocol used by the PLCs.
   • DReplace all legacy PLCs with modern ones that support encryption.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which IoT attack type is most directly associated with an attacker eavesdropping on unencrypted MQTT traffic between a smart home hub and a cloud server?

   • AData interception
   • BDevice hijacking
   • CBotnet recruitment
   • DFirmware modification
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A manufacturing company deploys a fleet of smart sensors that transmit production data to a central server using an unencrypted MQTT protocol. The sensors have hardcoded credentials and no mechanism for remote firmware updates. The security team is asked to reduce the risk of data interception and device compromise without replacing the hardware immediately. Which combination of actions best addresses the most critical risks?

   • APlace the sensors on a separate VLAN with strict firewall rules, change the default credentials where possible, and implement a gateway that encrypts MQTT traffic.
   • BConnect the sensors directly to the internet so they can receive automatic updates from the vendor.
   • CApply a firmware update to all sensors to enable TLS and remove hardcoded credentials.
   • DDisable the MQTT protocol entirely and use a proprietary serial protocol that is not publicly documented.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A botnet is recruiting IoT devices by exploiting a known vulnerability in a specific model of network-attached storage (NAS) devices. The devices are exposed to the internet. Which countermeasure would be most effective in preventing these devices from being recruited?

   • AApply the vendor's firmware patch to close the vulnerability
   • BChange the default password on all NAS devices
   • CDisable the NAS devices' internet-facing interfaces
   • DMonitor the NAS devices for unusual outbound traffic
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A chemical plant has experienced a series of targeted spear-phishing emails sent to control-room operators. The emails contain malicious attachments that, if opened, could give attackers a foothold in the OT network. The plant has a strict policy that OT systems must remain available at all times. Which countermeasure best balances security and availability?

   • ADisconnect the OT network from the internet entirely
   • BDeploy an intrusion prevention system (IPS) inline on the OT network
   • CRequire all operators to use multi-factor authentication for OT systems
   • DImplement email filtering and conduct security awareness training for operators
   Reveal Solution Discussion Select an answer first