Which practice is part of secure IoT device decommissioning?

Leaving the device connected to the network

Reusing the same credentials for the next device

Securely wiping data and revoking certificates

Ignoring the device after removal

A manufacturer of smart thermostats wants to ensure that only signed firmware can be installed on devices. This prevents attackers from flashing malicious firmware. Which security measure should be implemented during the device boot process?

Secure boot with digital signature verification

A company installs smart locks for office doors. The locks are managed via a cloud service. The security team wants to ensure that only authorized employees can control the locks and that the locks cannot be accessed by unauthorized parties. Which measure is most important?

Disable the cloud management and use only physical keys.

Use a shared password for all locks to simplify management.

Rely on the physical security of the locks to prevent unauthorized access.

Implement strong authentication for the cloud management interface and use unique credentials for each lock.

A utility company uses smart meters that send consumption data over a low-power wireless network to a collector. The data is used for billing and must be kept confidential and unaltered. The meters support DTLS. Which additional measure should the company implement to ensure data integrity?

Encrypt the data with a proprietary algorithm before transmission.

Use DTLS with a pre-shared key (PSK) to encrypt and authenticate the data.

Use a simple checksum appended to each message to detect accidental errors.

Rely on the low-power network's inherent security features.

EC-CouncilIoT Security Essentials

Domain 4Objective 4

IoT Security Measures ISE Practice Questions (Page 5)

Part of the IoT Threats and Basic Security domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

6concepts

Questions 21–25

21foundation · easy
Which practice is part of secure IoT device decommissioning?
Select an answer first
22application · medium
A manufacturer of smart thermostats wants to ensure that only signed firmware can be installed on devices. This prevents attackers from flashing malicious firmware. Which security measure should be implemented during the device boot process?
Select an answer first
23application · medium
A company installs smart locks for office doors. The locks are managed via a cloud service. The security team wants to ensure that only authorized employees can control the locks and that the locks cannot be accessed by unauthorized parties. Which measure is most important?
Select an answer first
24foundation · easy
Which security measure is specifically used to verify that a device or user is who they claim to be before granting access to an IoT system?
Select an answer first
25application · medium
A utility company uses smart meters that send consumption data over a low-power wireless network to a collector. The data is used for billing and must be kept confidential and unaltered. The meters support DTLS. Which additional measure should the company implement to ensure data integrity?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ISE” is a trademark of its owner, used for identification only.