IoT Architecture and Security Controls NDE Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A security team is threat-modeling an IoT system that includes a mobile app, a cloud backend, and edge devices. They have limited time and must focus on the most critical threats. Which approach is most effective?

   • AAddress all identified threats equally to ensure complete coverage.
   • BPrioritize threats based on the attack surface and potential impact, such as remote code execution on edge devices.
   • CFocus only on threats to the cloud backend because it stores the most data.
   • DUse a checklist of common IoT vulnerabilities and fix those only.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which network security device is commonly used to filter traffic between an IoT network and the rest of the corporate network?

   • ARepeater
   • BFirewall
   • CHub
   • DSwitch
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A city deploys smart streetlights that communicate over a low-power wide-area network (LPWAN) to a central management system. The network team must ensure that only authorized streetlights can send data. Which control is most appropriate?

   • ADisable the LPWAN radio on the streetlights.
   • BUse a firewall to block all incoming traffic to the management system.
   • CUse device authentication with unique certificates or pre-shared keys for each streetlight.
   • DEncrypt the data after it reaches the management system.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   When modeling threats in an IoT environment, which of the following is a key reason to consider the cloud as part of the attack surface?

   • ACloud services only store metadata
   • BCloud services store and process IoT data, making them targets for data breaches
   • CCloud services are always insecure
   • DCloud services are not part of the IoT architecture
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   During threat modeling of an IoT system, the team identifies that an attacker could physically tamper with a sensor to send false data. The sensor has no tamper-proofing. Which mitigation is most effective given the physical attack vector?

   • AImplement cryptographic attestation or secure boot to ensure the sensor's firmware and data are authentic.
   • BEncrypt all data sent by the sensor.
   • CUse a firewall to block unexpected traffic from the sensor.
   • DAdd more sensors to cross-validate data.
   Reveal Solution Discussion Select an answer first