A company uses webhooks to notify its ERP system when an IoT device reports a critical fault. The ERP system sometimes goes down for maintenance. What is the most important consideration when implementing the webhook?

Implement retry logic with exponential backoff for failed deliveries.

Ignore delivery failures to avoid overloading the ERP system.

Send the webhook over HTTP to reduce latency.

Use a single webhook URL for all events.

A company is implementing webhooks to notify a cloud service when IoT devices detect anomalies. To ensure reliable and secure webhook delivery, which practices should be followed? (Select all that apply.)

Include a retry mechanism for failed deliveries

Allow unauthenticated webhook endpoints for simplicity

Sign each webhook payload with a secret key

Use HTTPS for webhook endpoints

Send webhook payloads in plaintext to reduce latency

An IoT vendor exposes a public REST API for its smart cameras. The API allows users to view live feeds and change settings. Which security measure is most critical to prevent unauthorized access?

Use JSON instead of XML for responses.

Require authentication via OAuth 2.0 tokens.

Use HTTP status codes correctly.

Which web-based approach allows an administrator to remotely monitor and manage multiple IoT devices through a browser interface?

Connecting directly to each device's serial console over the internet

Sending emails to the device to change its configuration

Using FTP to upload configuration files to each device individually

Using a web dashboard that communicates with devices via REST APIs

EC-CouncilIoT Security Essentials

Domain 3Objective 1

Web Communications ISE Practice Questions (Page 3)

Part of the IoT Advanced Topics domain, which makes up ~13% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–10 in this domain), expect 2–3 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

6concepts

Questions 11–15

11expert · hard
A company uses webhooks to notify its ERP system when an IoT device reports a critical fault. The ERP system sometimes goes down for maintenance. What is the most important consideration when implementing the webhook?
Select an answer first
12foundation · easy
In a RESTful API for an IoT device, which HTTP method is typically used to update an existing resource, such as changing a thermostat's target temperature?
Select an answer first
13expert · hard · select all that apply
A company is implementing webhooks to notify a cloud service when IoT devices detect anomalies. To ensure reliable and secure webhook delivery, which practices should be followed? (Select all that apply.)
Select an answer first
14application · medium
An IoT vendor exposes a public REST API for its smart cameras. The API allows users to view live feeds and change settings. Which security measure is most critical to prevent unauthorized access?
Select an answer first
15foundation · easy
Which web-based approach allows an administrator to remotely monitor and manage multiple IoT devices through a browser interface?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ISE” is a trademark of its owner, used for identification only.