IoT Architecture and Security Controls NDE Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A hospital uses IoT patient monitors that transmit vital signs to a central server. The monitors are on a dedicated network segment. To ensure that only the central server can receive the data, what network-level control should be configured?

   • AConfigure access control lists on the network segment to allow traffic only to the central server's IP address and port.
   • BEnable MAC address filtering on the switch ports.
   • CDeploy an intrusion detection system on the segment.
   • DUse a VPN for all monitor communications.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A company installs hundreds of IP cameras that ship with default credentials and an open telnet port. The security team must harden these devices quickly. Which action should be the first priority?

   • AChange default credentials and disable telnet on every camera.
   • BPlace cameras on a separate VLAN with strict firewall rules.
   • CMonitor camera traffic with an intrusion detection system.
   • DApply the latest firmware to all cameras.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which of the following is a secure communication protocol commonly used in IoT to provide confidentiality and integrity?

   • ATelnet
   • BFTP
   • CTLS/DTLS
   • DHTTP
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company deploys IoT barcode scanners in a warehouse. The scanners run a stripped-down Linux OS and have a web server enabled for configuration. The security team wants to harden the devices. Which action is most appropriate?

   • ADisable the web server if it is not needed for daily operations.
   • BInstall a full antivirus suite on the scanners.
   • CConnect the scanners directly to the internet for easier management.
   • DChange the default password and leave the web server enabled.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company manufactures smart home devices and wants to align with the OWASP IoT Top 10. They are reviewing their development process. Which practice is directly aligned with OWASP IoT Top 10 guidance?

   • AAvoiding firmware updates to maintain device stability.
   • BUsing a single shared password for all devices to simplify management.
   • CConducting threat modeling during the design phase to identify attack surfaces.
   • DStoring all data in plaintext to reduce processing overhead.
   Reveal Solution Discussion Select an answer first