A building management system has IoT sensors for lighting and HVAC on the same network as employee workstations. The security team wants to limit the impact if a sensor is compromised. Which network control should be implemented?

Segment the IoT devices into a separate VLAN with strict firewall rules

Increase the Wi-Fi signal strength

Use the same subnet for all devices to simplify management

A smart home device manufacturer wants to ensure that only authorized users can control their devices. Which security measure should be implemented?

Rely on the device's physical location for security

Implement strong authentication with unique credentials for each user

Disable all authentication to improve user experience

Use the same password for all devices

A retail chain installs IoT-enabled HVAC controllers on the same network as their point-of-sale (POS) systems. They want to prevent a compromise of the HVAC controllers from affecting the POS systems. What is the most effective network security control to implement?

Segment the network so HVAC controllers are on a separate VLAN with firewall rules restricting traffic.

Use strong encryption on all wireless communication between devices.

Disable the HVAC controllers' web interfaces to reduce their attack surface.

Install an intrusion detection system (IDS) that monitors all traffic but does not block anything.

A company installs smart locks in their office. The locks have a web interface for management. The security team wants to ensure that only authorized administrators can access the management interface. Which measure should be implemented?

Disable authentication to simplify access

Use a shared admin account for all users

Allow anyone on the network to access the interface

Implement role-based access control (RBAC) and strong authentication

Which action is a key device hardening technique for IoT devices?

Using the same password for all devices

Enabling all available services

EC-CouncilIoT Security Essentials

Domain 4Objective 4

IoT Security Measures ISE Practice Questions (Page 1)

Part of the IoT Threats and Basic Security domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

6concepts

Questions 1–5

1application · medium
A building management system has IoT sensors for lighting and HVAC on the same network as employee workstations. The security team wants to limit the impact if a sensor is compromised. Which network control should be implemented?
Select an answer first
2application · medium
A smart home device manufacturer wants to ensure that only authorized users can control their devices. Which security measure should be implemented?
Select an answer first
3application · medium
A retail chain installs IoT-enabled HVAC controllers on the same network as their point-of-sale (POS) systems. They want to prevent a compromise of the HVAC controllers from affecting the POS systems. What is the most effective network security control to implement?
Select an answer first
4application · medium
A company installs smart locks in their office. The locks have a web interface for management. The security team wants to ensure that only authorized administrators can access the management interface. Which measure should be implemented?
Select an answer first
5foundation · easy
Which action is a key device hardening technique for IoT devices?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ISE” is a trademark of its owner, used for identification only.