A hospital has a mix of legacy IoT medical devices that cannot be updated and new IoT devices that support modern security protocols. The hospital wants to protect the network while maintaining the functionality of the legacy devices. Which approach is most effective?

Disable the legacy devices' network connectivity and use them only locally.

Replace all legacy devices with new ones that support modern security protocols.

Apply a virtual patch using an intrusion prevention system (IPS) to block known exploits.

Place legacy devices on a separate network segment with strict firewall rules and monitor traffic for anomalies.

A smart city project uses sensors to monitor air quality and sends data to a central server via the internet. The data is public but must not be tampered with. Which security measure is most important?

Encrypt the data at rest on the server to protect it from unauthorized access.

Anonymize the data before transmission to protect privacy.

Use a firewall to block unauthorized access to the server.

Use TLS to ensure data integrity during transmission.

A smart city deploys streetlights that communicate with a central management system over a low-power wireless network. The communication must be protected against replay attacks. Which security measure should be used?

Use plain UDP with a fixed IP address

A smart grid company uses IoT devices that communicate over both TCP and UDP. The devices send control commands that must be protected against replay attacks. The company is considering using TLS for TCP and DTLS for UDP. What additional measure is needed to prevent replay attacks?

Use sequence numbers and timestamps in the protocol to detect and reject replayed messages.

Use a stronger encryption algorithm, such as AES-256, to make replay attacks harder.

Use a longer key length for the TLS/DTLS handshake.

Use a firewall to block suspicious traffic.

A water treatment plant uses IoT sensors that communicate over a legacy serial protocol. The plant wants to add security without replacing all sensors. Which approach is most feasible?

Replace all sensors with new ones that support TLS

Use a gateway that converts the serial protocol to TLS-protected IP communication

Add a firewall between the sensors and the gateway

EC-CouncilIoT Security Essentials

Domain 4Objective 4

IoT Security Measures ISE Practice Questions (Page 8)

Part of the IoT Threats and Basic Security domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

6concepts

Questions 36–40

36expert · hard
A hospital has a mix of legacy IoT medical devices that cannot be updated and new IoT devices that support modern security protocols. The hospital wants to protect the network while maintaining the functionality of the legacy devices. Which approach is most effective?
Select an answer first
37application · medium
A smart city project uses sensors to monitor air quality and sends data to a central server via the internet. The data is public but must not be tampered with. Which security measure is most important?
Select an answer first
38application · medium
A smart city deploys streetlights that communicate with a central management system over a low-power wireless network. The communication must be protected against replay attacks. Which security measure should be used?
Select an answer first
39expert · hard
A smart grid company uses IoT devices that communicate over both TCP and UDP. The devices send control commands that must be protected against replay attacks. The company is considering using TLS for TCP and DTLS for UDP. What additional measure is needed to prevent replay attacks?
Select an answer first
40expert · hard
A water treatment plant uses IoT sensors that communicate over a legacy serial protocol. The plant wants to add security without replacing all sensors. Which approach is most feasible?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ISE” is a trademark of its owner, used for identification only.