6.7 Secure and Monitor Internet of Things (IoT) (e.g., Configuration, Network Isolation, Firmware Updates, End of Life (EOL) Management) SSCP Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A company uses IoT devices that are configured with default credentials and have not been updated since installation. The security team wants to improve the security posture. What should the team do first?

   • ADisconnect the devices from the network until they are updated.
   • BReplace all devices with new ones that have better security features.
   • CApply firmware updates first, then change the default credentials.
   • DChange the default credentials on all devices and then apply any available firmware updates.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A company uses IoT devices that are managed by a third-party vendor. The vendor is responsible for firmware updates. The company's security team wants to ensure that updates are applied in a timely manner. What should the security team do?

   • ADisconnect the devices from the network until the vendor applies updates.
   • BTrust the vendor to apply updates as they see fit.
   • CApply the updates themselves without the vendor's involvement.
   • DInclude a requirement in the contract that the vendor must apply security patches within a specified timeframe.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A retail chain has a fleet of smart point-of-sale (POS) terminals that have reached end-of-life (EOL). The vendor no longer provides security patches. The terminals are on the same network as the corporate servers. What is the most appropriate immediate action?

   • AMove the terminals to a guest Wi-Fi network to keep them separate from the corporate network.
   • BContinue using the terminals as-is because they have been reliable and no incidents have occurred.
   • CIsolate the EOL terminals on a separate VLAN with strict access controls and plan for their replacement.
   • DApply third-party security patches that are not officially supported by the vendor.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is a recommended practice for managing firmware updates on IoT devices?

   • AUsing only the firmware version that came with the device
   • BApplying updates only when a security incident occurs
   • CTesting updates in a controlled environment before deployment
   • DDisabling automatic updates to prevent interruptions
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A university has a research lab with various IoT devices, including some that are end-of-life. The devices are used for experiments and cannot be replaced immediately. The lab network also hosts sensitive research data. What is the best way to protect the research data while allowing the lab to continue using the IoT devices?

   • APlace the IoT devices on a separate VLAN with no access to the research data network, and restrict internet access to only what is needed.
   • BAllow the IoT devices to access the internet freely so they can receive automatic updates.
   • CDisable all network access for the IoT devices and use manual data transfer methods.
   • DConnect the IoT devices directly to the research data network to simplify data collection.
   Reveal Solution Discussion Select an answer first