IoT Architecture and Security Controls NDE Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A hospital deploys IoT infusion pumps that must communicate with a central monitoring server. The pumps are on the same flat network as general-purpose workstations. Which network-level control best reduces the risk of lateral movement if a workstation is compromised?

   • ASegment the pumps onto a dedicated VLAN with firewall rules that only allow traffic to the monitoring server.
   • BInstall antivirus on the pumps.
   • CDisable the pumps' wireless radios.
   • DUse MAC address filtering on the switch ports.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which IoT security control is most effective in limiting the impact of a compromised device by isolating it from critical systems?

   • AData encryption
   • BStrong authentication
   • CSecure boot
   • DNetwork segmentation
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   In the three-layer IoT architecture, which layer is responsible for collecting data from sensors and actuators?

   • ATransport layer
   • BNetwork layer
   • CPerception layer
   • DApplication layer
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company deploys smart thermostats in office buildings. The thermostats are managed through a cloud service. The security team wants to ensure that only authorized administrators can change temperature settings. Which control is most directly relevant?

   • ADisable the thermostat's physical buttons.
   • BImplement role-based access control (RBAC) on the cloud management platform.
   • CSegment the thermostats onto a separate VLAN.
   • DEncrypt all communication between thermostats and the cloud.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A hospital deploys IoT infusion pumps that communicate with a central monitoring system. The pumps are on the same network as general-purpose workstations. To reduce the risk of a compromised workstation affecting the pumps, what network-level control should be implemented?

   • AEnable MAC address filtering on the switch ports connected to the pumps.
   • BSegment the infusion pumps onto a separate VLAN with access control lists that only allow traffic to the monitoring system.
   • CDeploy an intrusion detection system on the workstation segment.
   • DRequire strong passwords on the workstation accounts.
   Reveal Solution Discussion Select an answer first