A smart doorbell sends a notification to a cloud service when motion is detected. The cloud service must then send an alert to the homeowner's phone. Which mechanism is most appropriate for the doorbell to notify the cloud service?

Use FTP to upload a log file with the event details.

Send an email to the cloud service's SMTP server.

Open a raw TCP socket to the cloud service and send a custom binary message.

Send an HTTP POST to a webhook endpoint on the cloud service.

A security team is reviewing the web communication of an IoT device that uses both HTTPS and WebSocket. Which practices should be implemented to secure these communications? (Select all that apply.)

Disable encryption to reduce latency

Validate and sanitize all input from web requests

Use strong authentication for both HTTPS and WebSocket connections

Use TLS 1.2 or higher for both HTTPS and WebSocket

Allow any origin to connect to the WebSocket endpoint

A city deploys smart streetlights that must be monitored and controlled remotely. The lights are behind a firewall and should not be directly accessible from the internet. Which management approach is most secure and scalable?

Use a central management server that devices connect to via outbound HTTPS or MQTT

Expose each streetlight's web interface on a public IP

Use a VPN to allow direct access to each streetlight's web interface

Use a serial console for each streetlight

A company manages hundreds of IoT sensors deployed in remote locations. The sensors are behind NAT and do not have public IP addresses. The operations team needs to remotely monitor and reconfigure these devices from a central web dashboard. Which approach is most suitable?

Assign each sensor a public IP address and expose its web interface directly.

Use SNMP polling from the central server to each sensor's private IP.

Use a REST API that the central server calls directly to each sensor's private IP.

Have each sensor establish an outbound WebSocket connection to the central management server.

EC-CouncilIoT Security Essentials

Domain 3Objective 1

Web Communications ISE Practice Questions (Page 6)

Part of the IoT Advanced Topics domain, which makes up ~13% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–10 in this domain), expect 2–3 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

6concepts

Questions 26–30

26application · medium
A smart doorbell sends a notification to a cloud service when motion is detected. The cloud service must then send an alert to the homeowner's phone. Which mechanism is most appropriate for the doorbell to notify the cloud service?
Select an answer first
27expert · hard · select all that apply
A security team is reviewing the web communication of an IoT device that uses both HTTPS and WebSocket. Which practices should be implemented to secure these communications? (Select all that apply.)
Select an answer first
28application · medium
A city deploys smart streetlights that must be monitored and controlled remotely. The lights are behind a firewall and should not be directly accessible from the internet. Which management approach is most secure and scalable?
Select an answer first
29application · medium
A company manages hundreds of IoT sensors deployed in remote locations. The sensors are behind NAT and do not have public IP addresses. The operations team needs to remotely monitor and reconfigure these devices from a central web dashboard. Which approach is most suitable?
Select an answer first
30foundation · easy
Which protocol is specifically designed to run over WebSockets to enable IoT devices to publish and subscribe to messages through a web browser or web-based client?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ISE” is a trademark of its owner, used for identification only.