6.7 Secure and Monitor Internet of Things (IoT) (e.g., Configuration, Network Isolation, Firmware Updates, End of Life (EOL) Management) SSCP Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company deploys smart meters for energy monitoring. The meters are configured with a common default password, and the vendor provides firmware updates via an unencrypted web portal. The security team must ensure the meters are securely configured and updated. What is the most important action?

   • ADisable the meters' network connectivity and rely on manual data collection.
   • BChange the default password on all meters and enforce a policy for regular password rotation.
   • CConnect the meters to the corporate network to simplify management and monitoring.
   • DUse the vendor's web portal to download firmware updates without verifying their integrity.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company has a fleet of IoT devices that are on the same network as the corporate servers. The devices are not critical to operations, but they are used for monitoring. The security team wants to reduce the risk of a compromised device affecting the servers. What should the team do?

   • AMove the IoT devices to a separate network segment with firewall rules that block access to the corporate servers.
   • BDisable the IoT devices' internet access to prevent external attacks.
   • CMonitor the IoT devices for unusual activity and respond to incidents.
   • DApply firmware updates to the IoT devices to fix any known vulnerabilities.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company has a number of IoT devices that are approaching end-of-life. The vendor has announced that support will end in six months. What should the company do to prepare?

   • ACreate a replacement plan and budget for new devices, and identify which devices are critical to operations.
   • BPurchase extended support from the vendor if available, but do not plan for replacement.
   • CWait until the support ends to assess the situation.
   • DApply the last available firmware update and continue using the devices indefinitely.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A hospital installs 200 IP cameras for patient monitoring. The cameras ship with a default admin password and an open telnet service. The network team must deploy them securely with minimal disruption to existing clinical systems. Which approach should they take first?

   • ADisable the telnet service on each camera and then connect them directly to the internet for remote monitoring by staff.
   • BPlace all cameras on a dedicated VLAN with strict firewall rules and change the default credentials before connecting them to the network.
   • CChange the default admin password on all cameras and immediately deploy them on the production network to avoid delays.
   • DConnect the cameras to the existing clinical VLAN and rely on the hospital's perimeter firewall to protect them from external threats.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is a primary risk of using an End of Life (EOL) IoT device?

   • AThe device will automatically stop functioning after the EOL date
   • BThe device will no longer receive security patches, leaving known vulnerabilities unaddressed
   • CThe device will require more frequent maintenance
   • DThe device will become slower over time
   Reveal Solution Discussion Select an answer first