A company has an IoT network with devices that communicate using a mix of protocols. The security team wants to implement network segmentation to isolate IoT devices from the corporate network. However, some IoT devices need to access specific corporate services. What is the best way to balance security and functionality?

Place IoT devices on the corporate network but use host-based firewalls on each device.

Disable all communication between IoT devices and the corporate network.

Use a single flat network for all devices to simplify management.

Create a separate VLAN for IoT devices and use firewall rules to allow only necessary communication to specific corporate services.

A manufacturing plant uses IoT controllers that need to be updated with new firmware to fix a critical vulnerability. The controllers are in a production environment and cannot be taken offline for long. What is the most secure approach to update the firmware?

Wait for the next scheduled maintenance cycle, regardless of how long that takes.

Ask the vendor to send a technician to manually update each controller one by one.

Install the firmware immediately without verification to fix the vulnerability as fast as possible.

Download the signed firmware from the vendor and install it during a scheduled maintenance window.

A logistics company uses GPS trackers on delivery vehicles. The trackers have a web-based management interface that is accessible from the internet. The company wants to reduce the risk of unauthorized access to the trackers. Which combination of measures is most effective?

Keep default credentials for ease of management and rely on the firewall to block external access.

Disable the web interface entirely and use a proprietary mobile app for management.

Use a strong password but leave remote management enabled for convenience.

Change default credentials, disable remote management when not needed, and restrict access to the interface via firewall rules.

A hospital deploys 500 IP cameras for patient monitoring. The cameras come with a default admin password and an open telnet port for remote diagnostics. The network team wants to reduce the attack surface before connecting them to the production network. Which two actions should the team take first?

Place the cameras on the production network and rely on the firewall to block external access.

Update the camera firmware to the latest version and leave the default password for now.

Change the default password on each camera and disable the telnet service.

Enable SNMP v1 on the cameras to allow monitoring and keep the default password for compatibility.

EC-CouncilIoT Security Essentials

Domain 4Objective 4

IoT Security Measures ISE Practice Questions (Page 4)

Part of the IoT Threats and Basic Security domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

6concepts

Questions 16–20

16expert · hard
A company has an IoT network with devices that communicate using a mix of protocols. The security team wants to implement network segmentation to isolate IoT devices from the corporate network. However, some IoT devices need to access specific corporate services. What is the best way to balance security and functionality?
Select an answer first
17application · medium
A manufacturing plant uses IoT controllers that need to be updated with new firmware to fix a critical vulnerability. The controllers are in a production environment and cannot be taken offline for long. What is the most secure approach to update the firmware?
Select an answer first
18application · medium
A logistics company uses GPS trackers on delivery vehicles. The trackers have a web-based management interface that is accessible from the internet. The company wants to reduce the risk of unauthorized access to the trackers. Which combination of measures is most effective?
Select an answer first
19application · medium
A hospital deploys 500 IP cameras for patient monitoring. The cameras come with a default admin password and an open telnet port for remote diagnostics. The network team wants to reduce the attack surface before connecting them to the production network. Which two actions should the team take first?
Select an answer first
20foundation · easy
Which practice limits the collection of personal data to only what is necessary for a specific purpose?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ISE” is a trademark of its owner, used for identification only.

IoT Security Measures ISE Practice Questions (Page 4)

Questions 16–20

A manufacturing plant uses IoT controllers that need to be updated with new firmware to fix a critical vulnerability. The controllers are in a production environment and cannot be taken offline for long. What is the most secure approach to update the firmware?

A logistics company uses GPS trackers on delivery vehicles. The trackers have a web-based management interface that is accessible from the internet. The company wants to reduce the risk of unauthorized access to the trackers. Which combination of measures is most effective?

Which practice limits the collection of personal data to only what is necessary for a specific purpose?

Keep studying — IoT Threats and Basic Security