A healthcare IoT device stores patient data locally on the device and also transmits it to a cloud server. The device has limited storage and cannot retain data for long. The organization must comply with data retention regulations. Which approach best balances compliance and device constraints?

Encrypt data on the device, transmit it securely to the cloud, and configure the cloud to enforce the required retention period.

Transmit data without encryption to save device resources.

Store all data on the device for the full retention period.

Delete data immediately after transmission to avoid retention obligations.

A manufacturer is threat-modeling a new line of internet-connected home appliances. The appliance has a mobile app for control, a cloud backend, and a home Wi-Fi connection. The team must prioritize the attack surface that is most likely to be exploited by a remote attacker who is not on the home network. Which attack surface should be prioritized?

The local Wi-Fi communication between the appliance and the home router.

The mobile app's local storage of user credentials.

The physical debug port on the appliance's circuit board.

The cloud backend API that the mobile app and device use for synchronization.

A smart agriculture company collects soil moisture data from field sensors and stores it in a cloud database. The sensors transmit data over a low-power wide-area network (LPWAN). The company needs to ensure that the data is protected both while stored and while transmitted. Which combination of controls best achieves this?

Compress the data before transmission and store it in a private database.

Use a firewall to protect the database and require strong passwords on the sensor accounts.

Use a VPN from the sensors to the cloud and rely on the cloud provider's default storage encryption.

Encrypt the data in the database using AES-256 and use a secure protocol like DTLS for sensor transmissions.

A city deploys smart meters from three different vendors. Each vendor uses a different communication protocol and management interface. The security team is struggling to apply consistent security policies. Which challenge does this scenario primarily illustrate?

Insufficient network bandwidth.

Resource constraints on the smart meters.

Heterogeneity of IoT devices and lack of standardization.

What is the purpose of a secure data lifecycle management policy in an IoT system?

To make data available to all users

To define how data is collected, stored, used, and deleted securely

To increase the amount of data collected

To reduce the cost of data storage

EC-CouncilNetwork Defense Essentials

Domain 5Objective 5

IoT Architecture and Security Controls NDE Practice Questions (Page 6)

Part of the Wireless, Mobile, and IoT Security domain, which makes up ~17% of our current practice bank.

50questions here

10free pages

8concepts

Questions 26–30

26expert · hard
A healthcare IoT device stores patient data locally on the device and also transmits it to a cloud server. The device has limited storage and cannot retain data for long. The organization must comply with data retention regulations. Which approach best balances compliance and device constraints?
Select an answer first
27expert · hard
A manufacturer is threat-modeling a new line of internet-connected home appliances. The appliance has a mobile app for control, a cloud backend, and a home Wi-Fi connection. The team must prioritize the attack surface that is most likely to be exploited by a remote attacker who is not on the home network. Which attack surface should be prioritized?
Select an answer first
28application · medium
A smart agriculture company collects soil moisture data from field sensors and stores it in a cloud database. The sensors transmit data over a low-power wide-area network (LPWAN). The company needs to ensure that the data is protected both while stored and while transmitted. Which combination of controls best achieves this?
Select an answer first
29application · medium
A city deploys smart meters from three different vendors. Each vendor uses a different communication protocol and management interface. The security team is struggling to apply consistent security policies. Which challenge does this scenario primarily illustrate?
Select an answer first
30foundation · easy
What is the purpose of a secure data lifecycle management policy in an IoT system?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NDE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “NDE” is a trademark of its owner, used for identification only.

IoT Architecture and Security Controls NDE Practice Questions (Page 6)

Questions 26–30

A healthcare IoT device stores patient data locally on the device and also transmits it to a cloud server. The device has limited storage and cannot retain data for long. The organization must comply with data retention regulations. Which approach best balances compliance and device constraints?

A city deploys smart meters from three different vendors. Each vendor uses a different communication protocol and management interface. The security team is struggling to apply consistent security policies. Which challenge does this scenario primarily illustrate?

What is the purpose of a secure data lifecycle management policy in an IoT system?

Keep studying — Wireless, Mobile, and IoT Security