EC-CouncilIoT Security Essentials
Domain 5Objective 3
Vulnerability Databases (National Vulnerability Database, US-CERT, Shodan) ISE Practice Questions (Page 9)
Part of the Cloud Security and Threat Intelligence domain, which makes up ~18% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)
48questions here
10free pages
10concepts
Questions 41–45
- 41
A vulnerability management team at a hospital network has just learned about a new critical vulnerability in a medical device management platform. The team needs to understand the severity, affected versions, and recommended mitigations. They also want to know if there is any ongoing threat activity related to this vulnerability. Which combination of sources should the team consult to get the most complete picture?
Select an answer first - 42
What kind of data does Shodan typically collect from internet-connected devices?
Select an answer first - 43
A security consultant is performing an external assessment for a client that manufactures IoT devices. The client wants to know if any of their devices are exposed to the internet on the default management port. The consultant needs to find devices that match the client's product name and are located in a specific country. Which Shodan query should the consultant use?
Select an answer first - 44
A security consultant is performing a risk assessment for a client that has IoT devices deployed across multiple office locations. The consultant wants to identify which of the client's public IP addresses are running a specific version of a web server that has a known vulnerability. The consultant has a list of the client's public IP ranges. Which Shodan query is most effective for this task?
Select an answer first - 45
Which Shodan filter would you use to find devices located in the United States?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ISE” is a trademark of its owner, used for identification only.