4.1 Identify and Describe Internet of Things (IoT) Devices and Endpoints CYBERSECURITY-APPRENTICE Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which of the following is an example of an IoT device?

   • AA laptop used by an employee for daily work tasks
   • BA network firewall appliance that filters traffic
   • CA smart thermostat that adjusts temperature based on occupancy sensors and can be controlled remotely
   • DA corporate email server running on a rack-mounted server
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   An enterprise is adding IoT devices to its network. The security team wants to enforce a policy that only allows authorized devices to connect. Which measure is most effective for this?

   • AUse a strong Wi-Fi password
   • BRely on the devices' built-in encryption
   • CDisable the devices' web interfaces
   • DImplement network access control (NAC) to authenticate and authorize devices
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is a common characteristic of many IoT endpoints that distinguishes them from traditional computing devices?

   • AThey require constant human interaction to operate
   • BThey are designed to perform a single, specialized function with limited resources
   • CThey have abundant processing power and memory to run complex applications
   • DThey are always powered by a wired connection to the electrical grid
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company uses smart locks for its office doors. The locks are managed via a cloud service. Which security challenge is most relevant to these devices?

   • AThey do not need security because they are not computers
   • BThey may be vulnerable to remote attacks if the cloud service is compromised
   • CThey are not IoT devices because they are physical locks
   • DThey are only vulnerable to physical tampering
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A company has a mix of IoT devices, including some that are no longer supported by the manufacturer. The security team is concerned about vulnerabilities. What is the most practical way to mitigate the risk from these unsupported devices?

   • ASegment them onto a separate network with strict access controls
   • BRely on the devices' built-in security features
   • CDisable all network access for these devices
   • DMonitor the devices manually 24/7
   Reveal Solution Discussion Select an answer first