A security analyst is reviewing traffic from a smart thermostat that uses MQTT over TLS to communicate with a cloud broker. The analyst wants to identify which layer of the OSI model is responsible for ensuring the MQTT messages are delivered reliably between the thermostat and the broker. Which layer should the analyst focus on?

Application layer, because MQTT is an application protocol and handles its own reliability.

Transport layer, because MQTT runs over TCP, which provides reliable delivery.

Session layer, because MQTT maintains persistent sessions between client and broker.

Network layer, because IP routing ensures packets are delivered to the correct destination.

EC-CouncilIoT Security Essentials

Domain 1Objective 3

OSI and TCP Models ISE Practice Questions (Page 6)

Part of the IoT Fundamentals and Networking domain, which makes up ~15% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 2–3 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

6concepts

Questions 26–27

26application · medium
A wearable health monitor sends a heart-rate reading to a smartphone app. The app receives the raw data and displays it. During de-encapsulation, which header is removed LAST before the application receives the data?
Select an answer first
27application · medium
A security analyst is reviewing traffic from a smart thermostat that uses MQTT over TLS to communicate with a cloud broker. The analyst wants to identify which layer of the OSI model is responsible for ensuring the MQTT messages are delivered reliably between the thermostat and the broker. Which layer should the analyst focus on?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to ISE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ISE” is a trademark of its owner, used for identification only.

OSI and TCP Models ISE Practice Questions (Page 6)

Questions 26–27

A wearable health monitor sends a heart-rate reading to a smartphone app. The app receives the raw data and displays it. During de-encapsulation, which header is removed LAST before the application receives the data?

Keep studying — IoT Fundamentals and Networking