A hospital is deploying IoT infusion pumps that deliver life-saving medication. The pumps must be remotely monitored and controlled. The security team proposes strong encryption and multi-factor authentication for all communications. The clinical staff complains that these measures add latency and complexity, potentially delaying urgent adjustments. What is the BEST approach to balance security and clinical needs?

Implement strong encryption with a lightweight protocol and role-based access control to minimize latency while maintaining security

Disable encryption to ensure zero latency for urgent commands

Prioritize availability by removing all security controls

Use multi-factor authentication for every single command, even routine adjustments

A manufacturing plant uses IoT sensors to monitor machine vibration. The data is used to predict maintenance needs. The plant manager wants to ensure that the system is always available, but also wants to prevent false data from causing unnecessary maintenance shutdowns. Which approach best addresses both concerns?

Use redundant sensors and validate data with a consensus algorithm before triggering maintenance

Use a single high-quality sensor and trust its data

Shut down the plant if any sensor fails

Encrypt all sensor data to prevent tampering

Which scenario best illustrates a threat to confidentiality in an IoT environment?

A DDoS attack floods an IoT gateway with traffic, preventing devices from connecting.

An attacker intercepts unencrypted temperature readings transmitted from a smart thermostat to the cloud.

A firmware update fails, causing a smart lock to become unresponsive.

A sensor sends incorrect humidity values because of a calibration error.

A smart building management system controls HVAC and lighting. During a heatwave, the system becomes unresponsive due to a denial-of-service attack, leaving occupants without cooling. Which control would most directly prevent this availability failure?

Increase the frequency of sensor readings

Implement rate limiting and traffic filtering on the building's network gateway

Encrypt all communication between sensors and the controller

Use digital signatures on all control commands

A wearable fitness tracker sends health data to a smartphone app. A user notices that the app shows incorrect step counts. Later, they discover that an attacker intercepted and changed the data during sync. Which two CIA principles are affected?

Confidentiality and availability

EC-CouncilIoT Security Essentials

Domain 4Objective 2

The CIA Triad ISE Practice Questions (Page 1)

Part of the IoT Threats and Basic Security domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

5concepts

Questions 1–5

1expert · hard
A hospital is deploying IoT infusion pumps that deliver life-saving medication. The pumps must be remotely monitored and controlled. The security team proposes strong encryption and multi-factor authentication for all communications. The clinical staff complains that these measures add latency and complexity, potentially delaying urgent adjustments. What is the BEST approach to balance security and clinical needs?
Select an answer first
2expert · hard
A manufacturing plant uses IoT sensors to monitor machine vibration. The data is used to predict maintenance needs. The plant manager wants to ensure that the system is always available, but also wants to prevent false data from causing unnecessary maintenance shutdowns. Which approach best addresses both concerns?
Select an answer first
3foundation · easy
Which scenario best illustrates a threat to confidentiality in an IoT environment?
Select an answer first
4application · medium
A smart building management system controls HVAC and lighting. During a heatwave, the system becomes unresponsive due to a denial-of-service attack, leaving occupants without cooling. Which control would most directly prevent this availability failure?
Select an answer first
5application · medium
A wearable fitness tracker sends health data to a smartphone app. A user notices that the app shows incorrect step counts. Later, they discover that an attacker intercepted and changed the data during sync. Which two CIA principles are affected?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ISE” is a trademark of its owner, used for identification only.

The CIA Triad ISE Practice Questions (Page 1)

Questions 1–5

Which scenario best illustrates a threat to confidentiality in an IoT environment?

A smart building management system controls HVAC and lighting. During a heatwave, the system becomes unresponsive due to a denial-of-service attack, leaving occupants without cooling. Which control would most directly prevent this availability failure?

A wearable fitness tracker sends health data to a smartphone app. A user notices that the app shows incorrect step counts. Later, they discover that an attacker intercepted and changed the data during sync. Which two CIA principles are affected?

Keep studying — IoT Threats and Basic Security