1.7 Create and Apply Internet of Things (IoT) Security Profiles NETWORK-SECURITY-ANALYST Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company has an IoT security profile that allows smart TVs to communicate only with the content management server. The profile has an allow rule for that server and a deny-all rule. However, the administrator finds that smart TVs can still access the internet. What is the most likely cause?

   • AThe deny-all rule is placed before the allow rule, so it is blocking all traffic, but the allow rule is still allowing internet access
   • BThe deny-all rule in the IoT security profile is not being applied because the allow rule is matching all traffic
   • CThe IoT security profile is not applied to the security policy rule that matches the smart TV traffic
   • DThe smart TVs are using a different source IP address than expected, so the security policy rule does not match
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which of the following is a method to verify that an IoT security profile is being enforced?

   • AReviewing traffic logs for matches to the policy rule with the profile
   • BVerifying the profile is listed in the global configuration
   • CChecking the firewall's routing table
   • DConfirming the IoT device is connected to the network
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A security administrator has applied an IoT security profile to a security policy rule for smart TVs in a hotel. They want to verify that the profile is enforcing the intended restrictions. Which log type should they examine to see if the IoT security profile's rules are being triggered?

   • AConfiguration logs for the IoT security profile
   • BTraffic logs for sessions that match the security policy rule
   • CSystem logs for firewall configuration changes
   • DThreat logs for malware detection
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the result of applying an IoT security profile to a security policy rule?

   • AThe profile's rules are enforced on traffic that matches the policy rule
   • BThe profile overrides the policy rule's action
   • CThe policy rule is automatically disabled
   • DThe policy rule is converted to an IoT-specific rule
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A hospital's network security team wants to enforce different security policies for IoT medical devices, such as infusion pumps and patient monitors, versus traditional IT devices. They plan to use IoT security profiles. What is the primary purpose of creating an IoT security profile in this context?

   • ATo replace the need for traditional security policy rules by automatically blocking all IoT traffic
   • BTo provide a centralized dashboard for monitoring IoT device health and firmware versions
   • CTo create a separate network segment for IoT devices to isolate them from the rest of the network
   • DTo define a set of security rules that apply specifically to IoT devices based on their device type and attributes
   Reveal Solution Discussion Select an answer first