5.2 Explain the Function of Security Policies, Device-IDs, and Monitoring and Logging in the Configuration and Maintenance of IoT Security NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A security analyst is monitoring the traffic of IoT devices in a smart office. They notice that a smart thermostat is sending a large amount of data to an external server, which is unusual for this device. The thermostat has a Device-ID and is subject to a security policy that allows it to communicate with the building management server. What is the most likely explanation for this behavior?

   • AThe thermostat is working correctly, and the external communication is part of its normal operation.
   • BThe security policy is not configured correctly, and it is allowing all traffic from the thermostat.
   • CThe Device-ID for the thermostat is incorrect, and it is actually a different type of device.
   • DThe thermostat may be compromised, and the security policy may need to be updated to block the external communication.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A manufacturing plant uses IoT sensors that normally send a small status packet every 30 seconds. The security administrator notices that one sensor is now sending large data bursts every few minutes. They want to investigate whether this is a policy violation or a malfunction. What is the most effective first step to gather the necessary information?

   • AChange the security policy to deny all traffic from the sensor's Device-ID and monitor if the issue persists.
   • BReview the firewall logs for the specific sensor's Device-ID to see if the traffic matched the allowed policy and to examine the traffic patterns.
   • CImmediately block the sensor's Device-ID to stop the anomalous traffic and prevent potential harm to the network.
   • DCheck the sensor's physical connection to the network switch to see if it has been tampered with.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A security analyst is investigating a security incident that occurred two weeks ago involving an IoT camera. The analyst needs to determine the exact time the camera started communicating with an unknown external IP address. Which logging practice is most critical for this investigation?

   • AReviewing the configuration of the security policy to see if it was recently modified.
   • BUsing the Device-ID to verify the camera's firmware version at the time of the incident.
   • CEnsuring that logs for the security policy that allows the camera's traffic are enabled and retained for the required period.
   • DConfiguring the camera to send its own syslog messages to the central log collector.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company is required to provide a report of all network connections made by a specific IoT device over the past month for a compliance audit. What is the most important factor in being able to fulfill this request?

   • AThe logging on the security policy that applies to the IoT device must have been enabled and the logs retained for the required period.
   • BThe security policy must be configured to allow all traffic from the IoT device.
   • CThe IoT device must be connected to the network at the time of the audit.
   • DThe IoT device must have a static IP address so it can be easily identified in the logs.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A smart building management system uses IoT sensors to control lighting and HVAC. The security team has created Device-IDs for the sensors and a security policy that allows them to communicate with the building management server. They also have logging enabled on the policy. What is the primary benefit of this integrated approach?

   • AIt reduces the amount of network traffic generated by the IoT devices.
   • BIt eliminates the need for any other security controls on the network.
   • CIt provides a complete view of device behavior, enabling both enforcement and monitoring of the IoT devices.
   • DIt automatically patches the IoT devices to the latest firmware.
   Reveal Solution Discussion Select an answer first