The CIA Triad ISE Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A water treatment plant uses IoT sensors to monitor chlorine levels. If the monitoring system goes down, operators must manually test the water, which is slow and error-prone. The plant manager wants to ensure the monitoring system is always available. Which strategy is MOST effective?

   • AEncrypt all sensor data to prevent eavesdropping
   • BStore historical data in a tamper-proof database
   • CDeploy redundant sensors and a backup communication path
   • DUse a single, high-quality sensor to reduce complexity
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which attack is most likely to compromise the integrity of data collected by an IoT sensor?

   • AAn attacker intercepts and modifies the sensor readings before they reach the cloud server.
   • BAn attacker eavesdrops on the sensor data to learn the location of the device.
   • CAn attacker causes a denial-of-service condition that prevents the sensor from sending data.
   • DAn attacker uses a brute-force attack to guess the sensor's password.
   Reveal Solution Discussion Select an answer first
4. 33expert · hard

   A hospital relies on IoT vital-sign monitors that must be available 24/7. The security team proposes adding a cloud-based analytics service to improve data insights, but the hospital's network has limited bandwidth. What is the most appropriate approach to maintain availability while still gaining insights?

   • AIncrease the cloud bandwidth to accommodate all data
   • BProcess data locally on an edge gateway and send only summaries to the cloud
   • CDisable the cloud service to avoid any risk
   • DSend all raw data to the cloud for processing
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A food distribution company uses IoT sensors to monitor refrigerator temperatures. A sensor malfunction causes it to report a constant temperature of 4°C even when the refrigerator is actually at 10°C. Which CIA principle is most directly affected?

   • AIntegrity, because the sensor is offline
   • BAvailability, because the sensor is not reporting
   • CIntegrity, because the data does not reflect the true temperature
   • DConfidentiality, because the temperature data is exposed
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A military base deploys IoT sensors for perimeter surveillance. The sensors must operate in harsh conditions and have limited power. The security team must choose between stronger encryption (confidentiality) and longer battery life (availability). Which approach best balances the two?

   • ADisable encryption to maximize battery life
   • BRely on physical security of the sensors instead of encryption
   • CUse efficient encryption algorithms and optimize power consumption to maintain both security and uptime
   • DUse the strongest encryption regardless of power cost
   Reveal Solution Discussion Select an answer first