8.1 Architect Device Security NETWORK-SECURITY-ARCHITECT Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the purpose of classifying IoT devices based on their type and behavior?

   • ATo assign IP addresses
   • BTo improve device performance
   • CTo inform security policies
   • DTo reduce network traffic
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A factory has a mix of legacy machines and modern IoT sensors. The legacy machines cannot be updated and are critical to production. The security architect must protect the network from potential compromise of these legacy machines. Which enforcement strategy is most effective?

   • ASegment legacy machines into a separate VLAN and restrict all traffic to only necessary communication.
   • BAllow all traffic between legacy machines and the rest of the network to avoid disruption.
   • CDisconnect legacy machines from the network entirely.
   • DApply the same security policies to all devices regardless of age.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which tool is commonly used for active discovery of IoT devices by sending packets to the network and analyzing responses?

   • ANmap
   • Btcpdump
   • CNetFlow collector
   • DWireshark
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which attribute is commonly used to classify an IoT device?

   • AIP address
   • BSerial number
   • CFirmware version
   • DDevice type
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A university has a mix of student-owned smart devices (watches, speakers) and university-owned lab equipment. The security team must implement policies that allow student devices to access the internet but prevent them from reaching the lab network. At the same time, lab equipment must be able to communicate with each other but not with student devices. Which policy architecture best meets these requirements?

   • ACreate two zones: 'Student-IoT' and 'Lab'. Allow Student-IoT to access the internet, deny Student-IoT to Lab, and allow Lab to Lab.
   • BAllow all traffic between zones and rely on device authentication.
   • CPlace all devices in one zone and use application-level policies to filter traffic.
   • DDeny all traffic from student devices to the lab, but allow lab devices to access the internet.
   Reveal Solution Discussion Select an answer first