A remote weather station uses IoT sensors to collect data and transmit it via satellite. The station is in a remote area and maintenance visits are rare. Which factor is most critical for ensuring the availability of the weather data?

Regular firmware updates from the vendor

Data compression to reduce transmission size

Battery life and reliable power management

Encryption of the data before transmission

A financial firm uses IoT devices to collect stock market data from multiple sources. An attacker injects false data into one source, causing the firm to make bad trades. Which CIA principle is primarily violated, and what control would BEST mitigate it?

Availability; add redundant data sources

Integrity; use digital signatures on data feeds

Integrity; use a firewall to block unauthorized access

Confidentiality; encrypt the data feeds

A wearable health device collects sensitive patient data and transmits it to a cloud server. The device has limited battery and processing power. The security team must decide between encrypting all data and using a lightweight integrity check. Which consideration should drive the decision?

The cloud server can handle all security, so the device needs no protection

Integrity is more important than confidentiality, so use only a checksum

Battery life is more important than data protection, so skip both controls

The sensitivity of the health data makes confidentiality the priority, so encryption is necessary despite the resource cost

A healthcare provider deploys wearable glucose monitors that transmit patient readings over the internet to a cloud portal. The provider is most concerned about preventing unauthorized parties from viewing the readings during transmission. Which control directly addresses this concern?

Encrypting the data in transit using TLS

Logging all access attempts to the portal

Adding a hash-based checksum to each message

Implementing a redundant cloud database

EC-CouncilIoT Security Essentials

Domain 4Objective 2

The CIA Triad ISE Practice Questions (Page 3)

Part of the IoT Threats and Basic Security domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

5concepts

Questions 11–15

11application · medium
A remote weather station uses IoT sensors to collect data and transmit it via satellite. The station is in a remote area and maintenance visits are rare. Which factor is most critical for ensuring the availability of the weather data?
Select an answer first
12application · medium
A financial firm uses IoT devices to collect stock market data from multiple sources. An attacker injects false data into one source, causing the firm to make bad trades. Which CIA principle is primarily violated, and what control would BEST mitigate it?
Select an answer first
13expert · hard
A wearable health device collects sensitive patient data and transmits it to a cloud server. The device has limited battery and processing power. The security team must decide between encrypting all data and using a lightweight integrity check. Which consideration should drive the decision?
Select an answer first
14application · medium
A smart factory uses IoT sensors to report temperature readings that trigger cooling systems. An attacker intercepts and modifies the temperature values sent to the controller, causing the cooling to run too long. Which CIA principle has been violated?
Select an answer first
15application · medium
A healthcare provider deploys wearable glucose monitors that transmit patient readings over the internet to a cloud portal. The provider is most concerned about preventing unauthorized parties from viewing the readings during transmission. Which control directly addresses this concern?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ISE” is a trademark of its owner, used for identification only.