IoT Architecture and Security Controls NDE Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A company deploys IoT door locks that authenticate users via a mobile app. The locks also support a web-based admin console. Which control is most important to prevent unauthorized administrative access?

   • AEnforce strong, unique credentials and multi-factor authentication for the admin console.
   • BEncrypt all traffic between the locks and the mobile app.
   • CDisable the web admin console entirely.
   • DSegment the locks onto a separate network.
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A smart agriculture company uses wireless sensors that communicate using MQTT to a central broker. The broker is accessible from the internet. Which control is most important to secure the MQTT communication?

   • AUse TLS for MQTT and require client authentication with certificates.
   • BUse a firewall to restrict access to the broker's IP address.
   • CChange the default MQTT port from 1883 to a non-standard port.
   • DDisable the broker's web interface.
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A city deploys smart parking sensors that report occupancy via a cellular gateway. The sensors are battery-powered, have limited memory, and use a proprietary protocol. The gateway aggregates data and forwards it to a cloud dashboard. A security consultant is asked to recommend a control that fits the sensors' constraints while protecting the data as it travels from the sensors to the gateway. Which control is most appropriate?

   • APlace a firewall between the sensors and the gateway to filter traffic.
   • BRequire mutual TLS certificates on each sensor for all communications.
   • CUse a VPN tunnel from each sensor to the cloud dashboard.
   • DDeploy a lightweight encryption protocol such as AES-CCM at the link layer between sensors and gateway.
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   Which IoT security challenge is exemplified by a smart home network containing devices from different manufacturers using different communication protocols?

   • ALack of standardization
   • BScalability issues
   • CResource constraints
   • DHeterogeneity
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A company deploys IoT sensors in a factory that communicate with a local gateway. The gateway forwards data to the cloud. The security team wants to ensure that only authorized sensors can send data to the gateway. Which control should be implemented?

   • AEncrypt all data with a shared symmetric key.
   • BDisable the sensors' debug interfaces.
   • CPlace a firewall between the sensors and the gateway.
   • DUse mutual authentication between each sensor and the gateway, such as certificate-based authentication.
   Reveal Solution Discussion Select an answer first