IoT Security Measures ISE Practice Questions (Page 9)

Questions 41–45

1. 41application · medium

   A smart home company collects usage data from its devices to improve features. The company wants to comply with data protection regulations while still gaining useful insights. Which practice best supports data privacy and protection?

   • AAnonymize the data but do not encrypt it because anonymization is sufficient.
   • BStore all data on the device itself to avoid cloud storage and related regulations.
   • CCollect as much data as possible for future analysis and store it in plain text for easy access.
   • DCollect only the minimum data necessary for the feature improvement and encrypt it at rest.
   Reveal Solution Discussion Select an answer first
2. 42expert · hard

   A multinational company deploys IoT sensors in its factories to monitor production. The data collected includes personal data of employees. The company must comply with GDPR, which requires data protection by design and by default. The data is stored in a cloud region outside the EU. What is the most appropriate measure to ensure compliance?

   • AStore all data on-premises in the EU to avoid any cross-border transfer issues.
   • BAnonymize the data so GDPR does not apply.
   • CImplement data minimization, encryption, and ensure that data transfers to non-EU countries have appropriate safeguards such as standard contractual clauses.
   • DUse a cloud provider that is certified under the EU-US Data Privacy Framework.
   Reveal Solution Discussion Select an answer first
4. 43expert · hard

   A power utility has a large fleet of smart meters that are deployed in the field. A critical firmware vulnerability is discovered, and the vendor releases a patch. The meters are in remote locations with limited connectivity, and the update must be done over the air. The utility wants to ensure the update is authentic and does not get interrupted. Which approach is most secure and practical?

   • AUse a multicast update to all meters simultaneously to save time.
   • BHave a technician visit each meter to manually update the firmware.
   • CUse a signed firmware image and implement a resumable update mechanism with integrity verification.
   • DSend the firmware in small unencrypted chunks to avoid bandwidth issues.
   Reveal Solution Discussion Select an answer first
5. 44expert · hard

   A smart city project collects video footage from public cameras. The footage is stored for 30 days and then deleted. The city must comply with data protection regulations. Which practice is most important?

   • AAllow any city employee to access the footage
   • BStore footage indefinitely for future investigations
   • CEncrypt the footage but never delete it
   • DImplement a data retention policy that automatically deletes footage after 30 days
   Reveal Solution Discussion Select an answer first
6. 45foundation · easy

   Which measure protects data stored on an IoT device or backend server from unauthorized access?

   • ASecure boot
   • BData minimization
   • CEncryption at rest
   • DNetwork segmentation
   Reveal Solution Discussion Select an answer first