A security team is designing a REST API for a smart-health device that transmits sensitive patient data. The API must comply with data protection regulations and prevent unauthorized access. Which combination of measures provides the strongest defense?

HTTPS with API keys and IP allowlisting

HTTP with JSON Web Tokens (JWT) and CORS enabled

HTTPS with basic authentication and device certificates

HTTPS with OAuth 2.0 tokens and role-based access control (RBAC)

A developer is designing a RESTful API for a smart-home system. The API must allow users to control devices, and the developer wants to follow RESTful best practices. Which of the following are appropriate RESTful API design choices? (Select all that apply.)

Use POST to create a new device

Use DELETE to remove a device from the system

Use GET to change a device's state

Use PUT to partially update a device's name

Use GET to retrieve device status

A smart-building vendor needs to stream real-time sensor readings from thousands of low-power devices to a central dashboard. The devices must maintain a persistent, low-latency connection and the payloads must be compact to reduce bandwidth. Which communication approach best meets these requirements?

Use WebSocket with binary or compact JSON payloads

Use HTTPS with long polling and JSON payloads

Use MQTT over WebSockets with XML payloads

Use plain HTTP GET requests every second with JSON payloads

A security architect is reviewing a smart meter API. The API uses HTTPS and requires an API key in the header. However, the key is embedded in the mobile app and the same key is used by all users. Which additional control is most important to prevent unauthorized data access?

Implement per-user authentication and authorization, such as OAuth 2.0.

Switch from JSON to XML to obscure the data.

EC-CouncilIoT Security Essentials

Domain 3Objective 1

Web Communications ISE Practice Questions (Page 8)

Part of the IoT Advanced Topics domain, which makes up ~13% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–10 in this domain), expect 2–3 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

6concepts

Questions 36–40

36application · medium
A smart agriculture company uses a REST API to collect soil sensor data. The sensors send readings to the API. Which HTTP method should the sensors use to submit new readings?
Select an answer first
37expert · hard
A security team is designing a REST API for a smart-health device that transmits sensitive patient data. The API must comply with data protection regulations and prevent unauthorized access. Which combination of measures provides the strongest defense?
Select an answer first
38expert · hard · select all that apply
A developer is designing a RESTful API for a smart-home system. The API must allow users to control devices, and the developer wants to follow RESTful best practices. Which of the following are appropriate RESTful API design choices? (Select all that apply.)
Select an answer first
39application · medium
A smart-building vendor needs to stream real-time sensor readings from thousands of low-power devices to a central dashboard. The devices must maintain a persistent, low-latency connection and the payloads must be compact to reduce bandwidth. Which communication approach best meets these requirements?
Select an answer first
40expert · hard
A security architect is reviewing a smart meter API. The API uses HTTPS and requires an API key in the header. However, the key is embedded in the mobile app and the same key is used by all users. Which additional control is most important to prevent unauthorized data access?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ISE” is a trademark of its owner, used for identification only.

Web Communications ISE Practice Questions (Page 8)

Questions 36–40

A smart agriculture company uses a REST API to collect soil sensor data. The sensors send readings to the API. Which HTTP method should the sensors use to submit new readings?

A security team is designing a REST API for a smart-health device that transmits sensitive patient data. The API must comply with data protection regulations and prevent unauthorized access. Which combination of measures provides the strongest defense?

A developer is designing a RESTful API for a smart-home system. The API must allow users to control devices, and the developer wants to follow RESTful best practices. Which of the following are appropriate RESTful API design choices? (Select all that apply.)

A security architect is reviewing a smart meter API. The API uses HTTPS and requires an API key in the header. However, the key is embedded in the mobile app and the same key is used by all users. Which additional control is most important to prevent unauthorized data access?

Keep studying — IoT Advanced Topics