Which of the following is a common method to isolate IoT devices from the main corporate network?

Placing all devices on the same subnet as the servers

Using a separate VLAN with firewall rules restricting traffic

Assigning static IP addresses to all devices

A company has a mix of IoT devices, some of which are end-of-life and some that are still supported. The EOL devices are on the same network as the supported devices. The security team must manage the risk without disrupting operations. What is the best approach?

Segment the network to isolate the EOL devices from the supported devices and critical systems.

Replace the EOL devices immediately, even if it causes disruption.

Disable the EOL devices and rely on the supported devices for all functions.

Apply the same firmware updates to both EOL and supported devices.

Why is it important to regularly update the firmware of IoT devices?

To increase the device's processing speed

To patch known vulnerabilities and improve security

To add new features that improve user experience

To ensure the device remains compatible with older software

A smart building management system uses IoT sensors to control HVAC and lighting. The sensors are managed by a third-party vendor. The security team wants to ensure the sensors are configured securely and receive timely updates. What should the security team do?

Set the sensors to automatically accept any firmware updates from the vendor without verification.

Require the vendor to provide documentation of default credential changes and a firmware update schedule as part of the service agreement.

Allow the vendor to manage the sensors without oversight because they are the experts.

Disconnect the sensors from the network and rely on manual controls for HVAC and lighting.

A hotel chain installs smart thermostats in guest rooms. The thermostats are connected to the hotel's main network, which also handles reservations and guest data. What is the best way to secure the thermostats?

Disable the thermostats' internet access and control them only through a local gateway.

Use the same network segment for the thermostats and the reservation system to simplify management.

Change the default password on each thermostat and leave them on the main network.

Place the thermostats on a separate VLAN with no access to the reservation system network.

Systems Security Certified Practitioner

Domain 6Objective 7

6.7 Secure and Monitor Internet of Things (IoT) (e.g., Configuration, Network Isolation, Firmware Updates, End of Life (EOL) Management) SSCP Practice Questions (Page 3)

Part of the Network and Communication Security domain, which accounts for 16% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–13 in this domain), expect 1–2 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

4concepts

16%of the exam

Questions 11–15

11foundation · easy
Which of the following is a common method to isolate IoT devices from the main corporate network?
Select an answer first
12expert · hard
A company has a mix of IoT devices, some of which are end-of-life and some that are still supported. The EOL devices are on the same network as the supported devices. The security team must manage the risk without disrupting operations. What is the best approach?
Select an answer first
13foundation · easy
Why is it important to regularly update the firmware of IoT devices?
Select an answer first
14application · medium
A smart building management system uses IoT sensors to control HVAC and lighting. The sensors are managed by a third-party vendor. The security team wants to ensure the sensors are configured securely and receive timely updates. What should the security team do?
Select an answer first
15application · medium
A hotel chain installs smart thermostats in guest rooms. The thermostats are connected to the hotel's main network, which also handles reservations and guest data. What is the best way to secure the thermostats?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.