IoT Architecture and Security Controls NDE Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which of the following is a best practice for hardening an IoT device?

   • AUse default credentials for simplicity
   • BDisable unnecessary services
   • CEnable all available services for maximum functionality
   • DDisable firmware updates to prevent changes
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A security analyst is threat-modeling an IoT deployment that includes smart locks, a cloud management platform, and a mobile app. The team must decide where to focus their security testing efforts. The locks are connected via a hub that uses Zigbee, and the hub connects to the cloud over Wi-Fi. Which attack surface is most critical to test for a remote attacker?

   • AThe cloud management platform's API and web interface.
   • BThe mobile app's local storage of user credentials.
   • CThe Zigbee communication between the locks and the hub.
   • DThe physical lock mechanism itself.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A security team is threat-modeling a smart agriculture system. The system includes soil sensors, a gateway, and a cloud dashboard. The team wants to identify potential attack vectors. Which approach is most appropriate for modeling threats in this IoT environment?

   • AList all possible attacks without considering the system architecture.
   • BTest only the physical security of the sensors.
   • CCreate a data flow diagram that traces data from sensors through the gateway to the cloud, identifying entry points and trust boundaries.
   • DFocus only on the cloud dashboard, since it is the most visible component.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company installs smart lighting systems in its office buildings. The lights are managed via a central controller that is connected to the corporate network. The security team wants to harden the devices. Which action is a best practice for IoT device hardening?

   • ADisable firmware updates to avoid changes.
   • BKeep the default administrator password for ease of management.
   • CConnect the controller directly to the internet for remote access.
   • DDisable any unnecessary services and ports on the central controller.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A developer is designing an IoT system for a smart building. The system includes temperature sensors, a local gateway, and a cloud-based analytics platform. The developer needs to identify where to implement network-level security controls. Which layer of the three-layer IoT architecture is most appropriate for a firewall?

   • ANetwork layer, between the gateway and the cloud.
   • BPerception layer, on each sensor.
   • CPerception layer, on the gateway.
   • DApplication layer, in the cloud analytics platform.
   Reveal Solution Discussion Select an answer first