1.7 Create and Apply Internet of Things (IoT) Security Profiles NETWORK-SECURITY-ANALYST Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A retail company has created an IoT security profile to restrict smart cameras from sending video data to unknown external servers. They have already created the profile and want to enforce it. What is the required step to apply the IoT security profile?

   • ACreate a new zone for the smart cameras and assign the IoT security profile to that zone
   • BAdd the IoT security profile to the firewall's interface configuration
   • CAttach the IoT security profile to a security policy rule that matches the traffic from the smart cameras
   • DEnable the IoT security profile globally in the firewall's device settings
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A university is configuring an IoT security profile for smart building sensors. They want to allow the sensors to communicate with the building management system (BMS) on a specific internal subnet, but deny all other traffic from the sensors. What is the most effective way to configure the rules in the IoT security profile?

   • ACreate an allow rule for the sensor device type to the BMS subnet, and place a deny-all rule for sensors after it
   • BCreate a single deny rule for the sensor device type to any destination
   • CCreate a deny rule for all traffic from sensors, and then create an allow rule for the BMS subnet
   • DCreate a single allow rule for the sensor device type to any destination
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   An administrator has applied an IoT security profile to a security policy rule for smart thermostats. The profile includes a rule that denies traffic to external IP addresses. After testing, the administrator finds that the thermostats can still reach external IP addresses. What should the administrator check first?

   • AWhether the firewall's default security policy is allowing the traffic
   • BWhether the thermostats are using a different source IP address than expected
   • CWhether the IoT security profile is correctly configured with the deny rule
   • DWhether another security policy rule with a higher priority is allowing the traffic before the rule with the IoT security profile is evaluated
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   After applying an IoT security profile to a security policy rule, an administrator wants to confirm that the profile is actually being enforced. Which action should they take to verify enforcement?

   • AVerify that the IoT security profile is assigned to the correct zone
   • BConfirm that the IoT security profile is listed in the firewall's global security profile list
   • CCheck the traffic logs for the security policy rule to see if the IoT security profile is listed and if any actions were taken
   • DReview the IoT security profile's configuration to ensure it is saved
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the primary function of a rule within an IoT security profile?

   • ATo allow or deny traffic based on IoT device attributes
   • BTo specify which IoT device types are allowed to communicate with each other
   • CTo assign IP addresses to IoT devices
   • DTo define the logging settings for IoT traffic
   Reveal Solution Discussion Select an answer first