8.1 Architect Device Security NETWORK-SECURITY-ARCHITECT Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A hospital has a mix of IoT devices: infusion pumps, smart beds, and VoIP phones. The security team must enforce security policies. The infusion pumps have a known critical vulnerability but are on a separate VLAN with no internet access. The smart beds have no known vulnerabilities but are on the same VLAN as the hospital's administrative network. The VoIP phones are on a separate VLAN with internet access. Which device type should be the highest priority for enforcement?

   • ASmart beds, because they are on the administrative network.
   • BInfusion pumps, because they have a critical vulnerability.
   • CVoIP phones, because they have internet access.
   • DAll devices require equal enforcement.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A manufacturing plant has a mix of legacy PLCs and modern IP cameras on the same VLAN. The security architect must prioritize remediation efforts. The PLCs have known unpatched vulnerabilities but are isolated from the internet; the cameras have no known CVEs but are exposed to the internet via a port forward. Which device should be prioritized for immediate action?

   • AThe PLCs, because they have known vulnerabilities.
   • BNeither, because the plant is air-gapped.
   • CThe cameras, because they are internet-exposed.
   • DBoth equally, because both are on the same VLAN.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the purpose of applying access control policies to IoT devices?

   • ATo restrict what resources IoT devices can access
   • BTo simplify network management
   • CTo increase device performance
   • DTo enable device discovery
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A hospital has a mix of IoT devices: infusion pumps, smart beds, and VoIP phones. The security team must assess the risk of each device type. The infusion pumps have a known critical vulnerability but are on a separate VLAN with no internet access. The smart beds have no known vulnerabilities but are on the same VLAN as the hospital's administrative network. The VoIP phones are on a separate VLAN with internet access. Which device type poses the highest overall risk?

   • ASmart beds, because they are on the administrative network.
   • BVoIP phones, because they have internet access.
   • CInfusion pumps, because they have a critical vulnerability.
   • DAll devices pose equal risk.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A smart building management system includes HVAC controllers, lighting controllers, and smart locks. The security team wants to classify these devices to apply appropriate security policies. Which classification approach best supports policy enforcement?

   • AClassify by IP address range only.
   • BClassify all devices as 'smart building' and apply a single policy.
   • CClassify by vendor and model only.
   • DClassify by device type (HVAC, lighting, locks) and assign a risk level based on function and connectivity.
   Reveal Solution Discussion Select an answer first