IoT Architecture and Security Controls NDE Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Why is it important to regularly update the firmware of IoT devices?

   • ATo patch known security vulnerabilities
   • BTo reduce the device's power consumption permanently
   • CTo change the device's color
   • DTo increase the device's physical durability
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which regulation is specifically relevant to IoT systems that process personal data of individuals in the European Union?

   • ASOX
   • BGLBA
   • CHIPAA
   • DGDPR
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A multinational company deploys IoT sensors that collect personal data from EU citizens. The data is processed in a cloud region outside the EU. The legal team requires compliance with GDPR. Which action is most appropriate?

   • AStore the data on-premises in the EU and stop all cloud processing.
   • BEnsure the data transfer is covered by an appropriate legal mechanism, such as Standard Contractual Clauses, and implement technical safeguards.
   • CMove all data processing to an EU-based cloud region immediately.
   • DAnonymize the data so it no longer qualifies as personal data.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A manufacturer deploys smart sensors that collect temperature data and send it to a cloud dashboard. The sensors have limited processing power and cannot run complex encryption. The network team must ensure data confidentiality while the data is in transit from the sensors to the gateway. Which approach best fits the constraints?

   • AUse a VPN tunnel from each sensor to the cloud, bypassing the gateway entirely.
   • BUse lightweight encryption such as AES-CCM at the link layer between sensors and gateway, then TLS from gateway to cloud.
   • CImplement full TLS directly on each sensor to the cloud dashboard, eliminating the gateway.
   • DSend data in plaintext from sensors to gateway and rely on the cloud's encryption at rest.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A logistics company uses IoT trackers on shipping containers. The trackers send location data to a cloud platform. The company must comply with a new regulation that requires data to be encrypted at rest and in transit. The trackers have limited battery and processing power. Which approach best meets the regulation while considering the trackers' constraints?

   • AStore data in a private database without encryption, relying on network security.
   • BEncrypt data only in the cloud and send plaintext over the air.
   • CUse a lightweight encryption protocol for tracker communications and enable encryption on the cloud storage.
   • DUse a full VPN tunnel from each tracker to the cloud.
   Reveal Solution Discussion Select an answer first