A water treatment plant uses IoT sensors to measure chemical levels. An attacker intercepts the sensor data and changes the reported chlorine levels to a lower value, causing operators to add too much chlorine. Which CIA principle is violated, and which control would have prevented this?

Integrity; increase the sampling rate

Integrity; use message authentication codes on sensor data

Availability; add redundant sensors

Confidentiality; encrypt the sensor data

A smart lock manufacturer stores user access codes in the cloud. A database misconfiguration allows any internet user to download the access codes. Which CIA principle is violated, and what is the most direct fix?

Integrity; add a checksum to the access codes

Confidentiality; change the access codes after the breach

Availability; replicate the database

Confidentiality; correct the database access controls

A smart city deploys IoT cameras for traffic monitoring. The video feeds are used for real-time traffic management and are also stored for law enforcement. The city must balance the need for real-time availability with the need to protect the privacy of citizens. What is the MOST appropriate approach?

Use a single high-bandwidth link to reduce costs

Encrypt stored video and use access controls, while ensuring the live feed is available through a redundant network

Make the live feed public to increase transparency

Disable storage to avoid privacy risks

A smart building management system controls HVAC and lighting. The system collects occupancy data that is considered sensitive. The building manager wants to ensure that the system remains operational during a cyberattack. Which approach best balances confidentiality and availability?

Focus only on availability because the building must operate

Use a single flat network to simplify management

Disable encryption to reduce latency and improve availability

Segment the network so that a compromise of the lighting system does not affect the HVAC system, and encrypt occupancy data

A financial trading firm uses IoT sensors to monitor market data feeds. The firm must ensure that the data is accurate and unaltered, but also needs low latency to make split-second trades. Which control best meets both requirements?

Disable all security controls to maximize speed

Use full disk encryption on the sensor storage

Add a human review step for every trade

Use hardware-accelerated message authentication codes (MACs) on the data feed

EC-CouncilIoT Security Essentials

Domain 4Objective 2

The CIA Triad ISE Practice Questions (Page 5)

Part of the IoT Threats and Basic Security domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

5concepts

Questions 21–25

21application · medium
A water treatment plant uses IoT sensors to measure chemical levels. An attacker intercepts the sensor data and changes the reported chlorine levels to a lower value, causing operators to add too much chlorine. Which CIA principle is violated, and which control would have prevented this?
Select an answer first
22application · medium
A smart lock manufacturer stores user access codes in the cloud. A database misconfiguration allows any internet user to download the access codes. Which CIA principle is violated, and what is the most direct fix?
Select an answer first
23expert · hard
A smart city deploys IoT cameras for traffic monitoring. The video feeds are used for real-time traffic management and are also stored for law enforcement. The city must balance the need for real-time availability with the need to protect the privacy of citizens. What is the MOST appropriate approach?
Select an answer first
24application · medium
A smart building management system controls HVAC and lighting. The system collects occupancy data that is considered sensitive. The building manager wants to ensure that the system remains operational during a cyberattack. Which approach best balances confidentiality and availability?
Select an answer first
25expert · hard
A financial trading firm uses IoT sensors to monitor market data feeds. The firm must ensure that the data is accurate and unaltered, but also needs low latency to make split-second trades. Which control best meets both requirements?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ISE” is a trademark of its owner, used for identification only.