A company deploys IoT sensors in a remote oil field. The sensors transmit operational data that is not highly sensitive, but the company is concerned about an attacker sending false data to cause equipment damage. The site has limited bandwidth and power. What is the BEST security control to prioritize?

Message authentication codes (MACs) to verify the authenticity and integrity of each transmission

A redundant satellite link for all communications

Full-disk encryption on the sensor devices

A complex firewall at the central server

A smart parking system uses sensors to detect open spots and updates a mobile app. During a major event, the system becomes slow and eventually stops responding because too many users are querying the app. Which CIA principle is most affected, and what is the best mitigation?

Integrity; add checksums to the sensor data

Availability; implement load balancing and scale the backend servers

Availability; restrict the app to a limited number of users

Confidentiality; encrypt the app traffic

A city deploys IoT-enabled streetlights that must respond to motion sensors within milliseconds for safety. The system also collects usage data for billing. The security team must choose a control that does not introduce noticeable latency. Which approach best balances security and availability in this context?

Implement multi-factor authentication for every sensor message

Route all traffic through a cloud-based security gateway for deep packet inspection

Disable encryption to maximize speed and rely on physical security

Use lightweight encryption and local authentication on the sensor network

A bank deploys IoT ATMs that must be available 24/7. The ATMs transmit transaction data that is highly sensitive. The bank is considering two options: (A) use a dedicated private network for all ATM traffic, or (B) use the public internet with strong encryption. Which option BEST balances confidentiality and availability?

Use the public internet with strong encryption, as it is cheaper

Use the public internet without encryption to reduce latency

Use a dedicated private network with redundant links, even though it is more expensive

Use a private network without redundancy to save costs

A retail store uses IoT cameras to monitor customer traffic. An employee with access to the camera system accidentally leaves a dashboard open on a public screen, exposing live video to customers. Which CIA principle is most directly affected, and what is the best immediate action?

Integrity; check if the video feed has been altered

Confidentiality; close the dashboard and require authentication to reopen it

Confidentiality; increase the camera resolution

Availability; restart the camera system

EC-CouncilIoT Security Essentials

Domain 4Objective 2

The CIA Triad ISE Practice Questions (Page 9)

Part of the IoT Threats and Basic Security domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

5concepts

Questions 41–45

41expert · hard
A company deploys IoT sensors in a remote oil field. The sensors transmit operational data that is not highly sensitive, but the company is concerned about an attacker sending false data to cause equipment damage. The site has limited bandwidth and power. What is the BEST security control to prioritize?
Select an answer first
42application · medium
A smart parking system uses sensors to detect open spots and updates a mobile app. During a major event, the system becomes slow and eventually stops responding because too many users are querying the app. Which CIA principle is most affected, and what is the best mitigation?
Select an answer first
43expert · hard
A city deploys IoT-enabled streetlights that must respond to motion sensors within milliseconds for safety. The system also collects usage data for billing. The security team must choose a control that does not introduce noticeable latency. Which approach best balances security and availability in this context?
Select an answer first
44expert · hard
A bank deploys IoT ATMs that must be available 24/7. The ATMs transmit transaction data that is highly sensitive. The bank is considering two options: (A) use a dedicated private network for all ATM traffic, or (B) use the public internet with strong encryption. Which option BEST balances confidentiality and availability?
Select an answer first
45application · medium
A retail store uses IoT cameras to monitor customer traffic. An employee with access to the camera system accidentally leaves a dashboard open on a public screen, exposing live video to customers. Which CIA principle is most directly affected, and what is the best immediate action?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to ISE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ISE” is a trademark of its owner, used for identification only.

The CIA Triad ISE Practice Questions (Page 9)

Questions 41–45

A smart parking system uses sensors to detect open spots and updates a mobile app. During a major event, the system becomes slow and eventually stops responding because too many users are querying the app. Which CIA principle is most affected, and what is the best mitigation?

A retail store uses IoT cameras to monitor customer traffic. An employee with access to the camera system accidentally leaves a dashboard open on a public screen, exposing live video to customers. Which CIA principle is most directly affected, and what is the best immediate action?

Keep studying — IoT Threats and Basic Security