What is the purpose of secure boot in an IoT device?

To encrypt the device's storage

To ensure that only trusted firmware is loaded during startup

To allow any firmware to run without verification

Which practice is part of device hardening for IoT devices?

Allowing unrestricted remote access

Using default passwords for ease of setup

Keeping all services enabled by default

A wearable health device manufacturer stores user health data in the cloud. To comply with data protection regulations, they need to ensure that the data is protected at rest and that only authorized personnel can access it. Which combination of measures should they implement?

Encrypt the data at rest and implement role-based access control (RBAC).

Encrypt the data in transit only, since the cloud provider secures the storage.

Use a strong password for the cloud account and enable two-factor authentication.

Anonymize the data before storing it, and no further protection is needed.

A building automation system uses IoT sensors and actuators connected to a central controller. The company wants to detect and respond to suspicious activity on the IoT network. Which control is most appropriate?

Use encryption on all communication between sensors and the controller.

Deploy an intrusion detection system (IDS) that monitors network traffic for anomalies and alerts the security team.

Implement a firewall that blocks all incoming traffic from the internet.

Disable all remote access to the central controller.

EC-CouncilIoT Security Essentials

Domain 4Objective 4

IoT Security Measures ISE Practice Questions (Page 6)

Part of the IoT Threats and Basic Security domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

6concepts

Questions 26–30

26foundation · easy
What does TLS provide to ensure that data has not been altered during transmission?
Select an answer first
27foundation · easy
What is the purpose of secure boot in an IoT device?
Select an answer first
28foundation · easy
Which practice is part of device hardening for IoT devices?
Select an answer first
29application · medium
A wearable health device manufacturer stores user health data in the cloud. To comply with data protection regulations, they need to ensure that the data is protected at rest and that only authorized personnel can access it. Which combination of measures should they implement?
Select an answer first
30application · medium
A building automation system uses IoT sensors and actuators connected to a central controller. The company wants to detect and respond to suspicious activity on the IoT network. Which control is most appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ISE” is a trademark of its owner, used for identification only.