5.2 Explain the Function of Security Policies, Device-IDs, and Monitoring and Logging in the Configuration and Maintenance of IoT Security NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A hospital has a policy that allows IoT patient monitors to communicate with the central nursing station. A new type of patient monitor is added to the network, and the security team wants to ensure it is subject to the same policy. What is the most efficient way to achieve this?

   • AAdd the new monitor to the existing Device-ID for patient monitors.
   • BCreate a new security policy for the new monitor and place it above the existing policy.
   • CDisable logging on the existing policy and create a new policy for the new monitor.
   • DModify the existing security policy to use the new monitor's IP address as the source.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   How does monitoring IoT traffic contribute to ensuring policy compliance?

   • ABy providing visibility into actual traffic patterns, which can be compared against policy rules
   • BBy blocking any traffic that does not match a policy
   • CBy automatically modifying security policies to match observed traffic
   • DBy encrypting all traffic to ensure it is secure
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A manufacturing company has IoT sensors that are critical for production. The security team wants to ensure that these sensors can only communicate with the production server, but they also want to allow temporary access for a maintenance vendor to troubleshoot a sensor. The vendor needs access to the sensor's management interface for a few hours. What is the most secure way to handle this?

   • ACreate a temporary security policy that allows the vendor's IP address to access the sensor's management interface, and remove it after the maintenance window.
   • BAdd the vendor's IP address to the existing security policy that allows the sensors to communicate with the production server.
   • CCreate a new Device-ID for the vendor's laptop and use it in a policy that allows access to the sensor's management interface.
   • DDisable the security policy for the sensors during the maintenance window to allow the vendor full access.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the main benefit of monitoring IoT traffic in a security context?

   • AIt provides a backup of all IoT data for disaster recovery
   • BIt replaces the need for security policies by observing traffic patterns
   • CIt automatically blocks all malicious traffic without user intervention
   • DIt helps detect anomalies and ensures that IoT devices are complying with security policies
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What role do logs play in troubleshooting IoT security issues?

   • AThey provide detailed information about events that can help identify the root cause of a problem
   • BThey replace the need for security policies
   • CThey automatically fix configuration errors in IoT devices
   • DThey encrypt all IoT communication to prevent issues
   Reveal Solution Discussion Select an answer first