4.1 Identify and Describe Internet of Things (IoT) Devices and Endpoints CYBERSECURITY-APPRENTICE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Why are IoT devices often considered a significant security risk in a network?

   • AThey are usually managed by a dedicated security team
   • BThey are typically built with strong encryption and secure boot mechanisms
   • CThey can be compromised and used as entry points or for botnet attacks
   • DThey are designed to be easily patched and updated
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   How do IoT devices typically integrate into an enterprise network?

   • AThey are always connected through a dedicated cellular network that is separate from the enterprise LAN
   • BThey are connected directly to the corporate network and often have access to other systems
   • CThey are placed on a separate, isolated network segment with no connection to the corporate network
   • DThey are managed by the same endpoint protection tools as traditional computers without any special considerations
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A company has IoT devices that use weak authentication. The security team wants to improve security without replacing the devices. Which measure is most effective?

   • AImplement network-level authentication and monitoring
   • BChange the devices' default passwords
   • CDisable the devices' network access
   • DRely on the devices' built-in encryption
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   A wearable glucose monitor that sends blood sugar readings to a patient's smartphone is an example of which IoT device category?

   • AIndustrial IoT
   • BSmart city IoT
   • CHealthcare IoT
   • DConsumer IoT
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is a key implication of IoT devices for endpoint security management in an enterprise?

   • AThey can be managed with the same security policies and tools as traditional endpoints
   • BThey do not require security monitoring because they are low-risk
   • CThey require visibility and control that accounts for their unique protocols and limited capabilities
   • DThey are automatically protected by the enterprise firewall without any additional configuration
   Reveal Solution Discussion Select an answer first