What is the basis for implementing security policies that govern IoT device communication?

Discovered device profiles and risk assessments

Network administrator preferences

Historical traffic patterns only

A hospital network has a flat Layer 2 segment for medical devices. The security team needs to inventory all IoT devices without disrupting clinical operations. They are considering active scanning with Nmap, passive traffic monitoring via SPAN port, and checking DHCP logs. Which approach should they use to achieve the most complete and least intrusive discovery?

Deploy an agent on every IoT device.

Enable passive monitoring on a SPAN port and correlate with DHCP logs.

Use only DHCP logs to identify devices.

Run active Nmap scans against the entire subnet during off-hours.

Which factor is typically considered when assessing the risk of an IoT device?

The device's known vulnerabilities

A logistics company has a mix of IoT devices including GPS trackers, temperature sensors, and barcode scanners. The security team needs to identify which devices are present on the network. They have access to a SPAN port and can also run active scans. Which method will provide the most accurate and up-to-date inventory?

Ask employees to manually list all devices.

Use passive monitoring on the SPAN port and correlate with active scan results.

Run a daily active scan of the entire network.

Which action is part of managing IoT security policies?

Updating policies when device profiles change

Deleting all policies after initial implementation

Applying the same policy to all devices

Palo Alto NetworksCertified Network Security Architect

Domain 8Objective 1

8.1 Architect Device Security NETWORK-SECURITY-ARCHITECT Practice Questions (Page 4)

Part of the Securing IoT Environments domain, which accounts for 11% of the NETWORK-SECURITY-ARCHITECT exam.

21questions here

5free pages

5concepts

11%of the exam

Questions 16–20

16foundation · easy
What is the basis for implementing security policies that govern IoT device communication?
Select an answer first
17application · medium
A hospital network has a flat Layer 2 segment for medical devices. The security team needs to inventory all IoT devices without disrupting clinical operations. They are considering active scanning with Nmap, passive traffic monitoring via SPAN port, and checking DHCP logs. Which approach should they use to achieve the most complete and least intrusive discovery?
Select an answer first
18foundation · easy
Which factor is typically considered when assessing the risk of an IoT device?
Select an answer first
19application · medium
A logistics company has a mix of IoT devices including GPS trackers, temperature sensors, and barcode scanners. The security team needs to identify which devices are present on the network. They have access to a SPAN port and can also run active scans. Which method will provide the most accurate and up-to-date inventory?
Select an answer first
20foundation · easy
Which action is part of managing IoT security policies?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NETWORK-SECURITY-ARCHITECT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-ARCHITECT” is a trademark of its owner, used for identification only.

8.1 Architect Device Security NETWORK-SECURITY-ARCHITECT Practice Questions (Page 4)

Questions 16–20

What is the basis for implementing security policies that govern IoT device communication?

Which factor is typically considered when assessing the risk of an IoT device?

Which action is part of managing IoT security policies?

Keep studying — Securing IoT Environments