A smart home security company is developing a mobile app that allows users to remotely unlock their front door. The app uses a cloud backend to relay commands to the door lock. A security researcher identifies a vulnerability where an attacker can intercept and replay the unlock command. The company wants to mitigate this without requiring the user to change their behavior (e.g., no additional authentication steps). Which mitigation is most effective?

Use a longer encryption key for the communication channel.

Use a nonce (a unique, one-time value) in each unlock command and have the door lock reject any command with a previously used nonce.

Use a static encryption key for all communication between the app and the door lock.

Require the user to enter a PIN every time they unlock the door.

A healthcare IoT app helps elderly patients manage their medication dispensers. The app must be accessible to users with low vision and limited dexterity. It also must prevent accidental medication overdoses by requiring confirmation before dispensing. Which design approach best balances accessibility and safety?

Use large buttons with high contrast, voice-guided instructions, and a two-step confirmation that requires a deliberate swipe

Require the user to enter a long alphanumeric PIN before every dispensing action

Use only voice commands with no visual confirmation, and dispense immediately upon voice command

Use a small, dense interface to fit more information on one screen, and require a single tap to dispense

What is a key consideration when deploying updates to a mobile IoT application that controls critical infrastructure?

Updates should only be done manually by end users

Updates should be rolled out immediately to all users without testing

Updates should be tested in a staging environment and rolled out gradually

Updates should be avoided to prevent any changes

EC-CouncilIoT Security Essentials

Domain 3Objective 2

Mobile Applications ISE Practice Questions (Page 9)

Part of the IoT Advanced Topics domain, which makes up ~13% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–10 in this domain), expect 2–3 from this objective — we provide 44 practice questions to prepare you well beyond it. (estimate)

44questions here

9free pages

7concepts

Questions 41–44

41application · medium
A smart-building startup is developing a mobile app to control HVAC units in a large office complex. The HVAC controllers are battery-powered and communicate over a low-power mesh network. The app must provide near-real-time status updates and allow users to adjust temperature setpoints. The development team needs to choose a protocol for direct mobile-to-device communication when users are physically near a controller. Which protocol is the most appropriate choice for this scenario?
Select an answer first
42expert · hard
A smart home security company is developing a mobile app that allows users to remotely unlock their front door. The app uses a cloud backend to relay commands to the door lock. A security researcher identifies a vulnerability where an attacker can intercept and replay the unlock command. The company wants to mitigate this without requiring the user to change their behavior (e.g., no additional authentication steps). Which mitigation is most effective?
Select an answer first
43expert · hard
A healthcare IoT app helps elderly patients manage their medication dispensers. The app must be accessible to users with low vision and limited dexterity. It also must prevent accidental medication overdoses by requiring confirmation before dispensing. Which design approach best balances accessibility and safety?
Select an answer first
44foundation · easy
What is a key consideration when deploying updates to a mobile IoT application that controls critical infrastructure?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to ISE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ISE” is a trademark of its owner, used for identification only.

Mobile Applications ISE Practice Questions (Page 9)

Questions 41–44

What is a key consideration when deploying updates to a mobile IoT application that controls critical infrastructure?

Keep studying — IoT Advanced Topics