6.7 Secure and Monitor Internet of Things (IoT) (e.g., Configuration, Network Isolation, Firmware Updates, End of Life (EOL) Management) SSCP Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company uses IoT barcode scanners in its warehouse. The scanners have a web-based management interface that is accessible from the local network. The security team wants to ensure the scanners are updated and configured securely. What should the team do?

   • ARely on the vendor to automatically push updates without any action from the security team.
   • BEstablish a regular schedule to check for and apply firmware updates from the vendor, and change the default admin password.
   • CDisable the web-based management interface to prevent unauthorized access.
   • DConnect the scanners to a guest Wi-Fi network to isolate them from the warehouse network.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   When deploying a new IoT device on a corporate network, which of the following actions is the most important initial security step?

   • AConnecting the device to the guest Wi-Fi network
   • BPlacing the device in a public area for easy access
   • CRegistering the device with the manufacturer
   • DChanging the default administrative credentials
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A municipality operates a water treatment plant with IoT sensors that monitor chemical levels. Some sensors are end-of-life and cannot be replaced until the next budget year. The sensors are on the same network as the plant's control systems. What is the best immediate action to reduce risk?

   • AIncrease the frequency of backups for the control systems to mitigate potential data loss.
   • BSegment the network to place the EOL sensors on a separate VLAN with strict firewall rules.
   • CApply firmware updates from the vendor's website even though the sensors are EOL.
   • DDisable the EOL sensors and rely on manual chemical testing.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which of the following is a recommended strategy for managing End of Life (EOL) IoT devices?

   • AMoving them to the main corporate network for better monitoring
   • BContinuing to use them but disabling all security features to save resources
   • CReplacing them with supported devices before they become a security liability
   • DIgnoring the EOL status as long as the device works
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which of the following is a recommended practice when securing the configuration of an IoT device?

   • AEnabling every feature the device offers
   • BUsing the same password for all devices for simplicity
   • CDisabling all unused services and ports
   • DLeaving the default settings to ensure compatibility
   Reveal Solution Discussion Select an answer first