A security analyst notices that a large number of internet-connected IP cameras are sending repeated login attempts to a central server. The cameras use default credentials and have outdated firmware. The analyst suspects the cameras have been compromised and are part of a botnet. Which immediate action would most effectively reduce the botnet's ability to grow and cause further harm?

Monitor the cameras' traffic to identify the command-and-control server

Change all default credentials and apply the latest firmware updates to the cameras

Disconnect the cameras from the network and perform a factory reset

Block all outbound traffic from the cameras to the internet

A manufacturing company has a highly automated production line that relies on a mix of modern and legacy OT devices. The legacy devices use insecure protocols and are not patchable. The company has a strict safety requirement that any security control must not introduce latency or risk of failure. Which security control is most appropriate?

Deploy passive network monitoring to detect anomalies without affecting traffic

Deploy an inline intrusion prevention system to block malicious traffic

Disconnect the legacy devices from the network

Replace the legacy devices with modern equivalents

A transportation authority operates a rail system with OT systems controlling signals and switches. The OT network is connected to the corporate network for maintenance access. The authority wants to improve security without affecting the availability of the rail system. Which approach is most appropriate?

Implement a demilitarized zone (DMZ) between the corporate and OT networks with a jump host for maintenance access.

Allow direct remote access from the corporate network to OT systems with multi-factor authentication.

Disconnect the OT network from the corporate network entirely.

Replace all OT systems with modern ones that have built-in security.

A retail company deploys IoT cameras for security. The cameras are accessible from the internet for remote viewing. The security team wants to ensure that the cameras cannot be used as a foothold to access the internal network. Which control is most effective?

Change the default password on each camera.

Disable remote viewing and only allow local access.

Apply firmware updates to the cameras.

Place the cameras in a DMZ and restrict outbound connections to only the video streaming service.

Which common IoT vulnerability is most likely to be exploited when a device sends sensor data to a server without encryption?

Insecure firmware update mechanism

EC-CouncilEthical Hacking Essentials

Domain 7Objective 5

IoT and OT Attacks and Countermeasures EHE Practice Questions (Page 3)

Part of the Wireless, Mobile, IoT, and OT Attacks domain, which makes up ~15% of our current practice bank.

54questions here

11free pages

8concepts

Questions 11–15

11application · medium
A security analyst notices that a large number of internet-connected IP cameras are sending repeated login attempts to a central server. The cameras use default credentials and have outdated firmware. The analyst suspects the cameras have been compromised and are part of a botnet. Which immediate action would most effectively reduce the botnet's ability to grow and cause further harm?
Select an answer first
12expert · hard
A manufacturing company has a highly automated production line that relies on a mix of modern and legacy OT devices. The legacy devices use insecure protocols and are not patchable. The company has a strict safety requirement that any security control must not introduce latency or risk of failure. Which security control is most appropriate?
Select an answer first
13expert · hard
A transportation authority operates a rail system with OT systems controlling signals and switches. The OT network is connected to the corporate network for maintenance access. The authority wants to improve security without affecting the availability of the rail system. Which approach is most appropriate?
Select an answer first
14application · medium
A retail company deploys IoT cameras for security. The cameras are accessible from the internet for remote viewing. The security team wants to ensure that the cameras cannot be used as a foothold to access the internal network. Which control is most effective?
Select an answer first
15foundation · easy
Which common IoT vulnerability is most likely to be exploited when a device sends sensor data to a server without encryption?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to EHE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “EHE” is a trademark of its owner, used for identification only.

IoT and OT Attacks and Countermeasures EHE Practice Questions (Page 3)

Questions 11–15

A retail company deploys IoT cameras for security. The cameras are accessible from the internet for remote viewing. The security team wants to ensure that the cameras cannot be used as a foothold to access the internal network. Which control is most effective?

Which common IoT vulnerability is most likely to be exploited when a device sends sensor data to a server without encryption?

Keep studying — Wireless, Mobile, IoT, and OT Attacks