8.2 Differentiate Between IoT Sensor Placement Options NETWORK-SECURITY-ARCHITECT Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is a primary benefit of placing an IoT sensor on an IoT gateway?

   • AIt is the only way to inspect encrypted IoT traffic.
   • BIt eliminates the need for any other security controls.
   • CIt provides a centralized view of all traffic across the entire enterprise.
   • DIt allows local inspection and filtering of IoT traffic before it reaches the core network.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A financial institution is deploying IoT sensors for ATM monitoring. They require real-time blocking of malicious traffic, but they also have a strict service-level agreement that the ATM network must have 99.999% uptime. The network team is concerned that inline sensors could introduce a single point of failure. Which approach best meets both requirements?

   • ADeploy inline sensors without bypass capability.
   • BDeploy sensors in the core network only.
   • CDeploy inline sensors with bypass (fail-open) capability.
   • DDeploy passive sensors and rely on manual response to alerts.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which limitation is associated with placing an IoT sensor in the core network?

   • AIt cannot inspect any traffic because it is out of band.
   • BIt requires a dedicated physical appliance for every IoT device.
   • CIt may not see traffic that stays within a single access switch segment.
   • DIt only works with cloud-based IoT devices.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which statement correctly describes IoT sensor placement on a gateway?

   • AIt is always deployed as a passive tap.
   • BIt inspects all traffic in the entire data center.
   • CIt is only used for cloud-based IoT devices.
   • DIt inspects traffic from the IoT devices that connect through that gateway.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A smart city is deploying IoT sensors for traffic management. They have a mix of high-bandwidth video cameras and low-bandwidth sensors. The security team wants to filter malicious traffic at the edge to reduce load on the core network, but they are concerned about the performance impact on the gateways that aggregate traffic. Which approach best balances edge filtering and core load reduction?

   • APlace sensors only in the core network.
   • BPlace passive sensors on the gateways and send all traffic to the core for analysis.
   • CPlace inline sensors on the IoT gateways to filter traffic before it enters the core.
   • DPlace sensors on the video cameras only.
   Reveal Solution Discussion Select an answer first