A smart home company collects video feeds from indoor cameras. A vulnerability in the camera firmware allows an attacker to view live feeds. Which CIA principle is violated, and what is the most direct mitigation?

Confidentiality; apply a firmware patch that fixes the vulnerability

Availability; add a backup camera

Integrity; add checksums to the video stream

Confidentiality; increase the video resolution

A utility company uses smart meters to send consumption data for billing. A customer disputes a bill, claiming the meter data was tampered with. Which control would provide the strongest evidence that the data has not been altered since it was generated?

Encrypt the data with a shared symmetric key

Store the data in a read-only database

Log all access to the meter data

Digitally sign each meter reading with a private key stored in the meter

A healthcare IoT device transmits patient heart rate data to a nurse's station. The data is sent over an unencrypted wireless network. Which control would best protect the confidentiality of the patient data?

Enable WPA2 or WPA3 encryption on the wireless network

Increase the transmission power of the device

Add a checksum to each data packet

A smart agriculture company uses soil moisture sensors to automatically trigger irrigation. A recent firmware update caused some sensors to report readings 20% higher than actual. Which CIA principle is most directly compromised, and what is the best immediate corrective action?

Confidentiality; encrypt the sensor data

Availability; add more sensors to the network

Integrity; roll back the firmware and recalibrate the sensors

Integrity; increase the sampling frequency

In an IoT-enabled hospital, patient vital-sign monitors transmit data to a central system. Which CIA principle is most likely to be prioritized in this context?

Integrity, because incorrect vital signs could lead to wrong medical decisions.

Availability, because the monitors must be accessible to healthcare staff at all times.

Confidentiality, because patient data must be kept private.

All three principles are equally prioritized in all IoT contexts.

EC-CouncilIoT Security Essentials

Domain 4Objective 2

The CIA Triad ISE Practice Questions (Page 6)

Part of the IoT Threats and Basic Security domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

5concepts

Questions 26–30

26application · medium
A smart home company collects video feeds from indoor cameras. A vulnerability in the camera firmware allows an attacker to view live feeds. Which CIA principle is violated, and what is the most direct mitigation?
Select an answer first
27application · medium
A utility company uses smart meters to send consumption data for billing. A customer disputes a bill, claiming the meter data was tampered with. Which control would provide the strongest evidence that the data has not been altered since it was generated?
Select an answer first
28application · medium
A healthcare IoT device transmits patient heart rate data to a nurse's station. The data is sent over an unencrypted wireless network. Which control would best protect the confidentiality of the patient data?
Select an answer first
29application · medium
A smart agriculture company uses soil moisture sensors to automatically trigger irrigation. A recent firmware update caused some sensors to report readings 20% higher than actual. Which CIA principle is most directly compromised, and what is the best immediate corrective action?
Select an answer first
30foundation · easy
In an IoT-enabled hospital, patient vital-sign monitors transmit data to a central system. Which CIA principle is most likely to be prioritized in this context?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ISE” is a trademark of its owner, used for identification only.