5.2 Explain the Function of Security Policies, Device-IDs, and Monitoring and Logging in the Configuration and Maintenance of IoT Security NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   In an IoT security configuration, what is the primary role of a security policy?

   • ATo replace the need for network segmentation by blocking all IoT traffic
   • BTo define which traffic is allowed or denied between IoT devices and other network resources
   • CTo provide a visual dashboard of IoT device health and status
   • DTo automatically patch vulnerabilities in IoT device firmware
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A logistics company has deployed IoT trackers on its fleet. The security team has set up a security policy that allows the trackers to communicate with the tracking server. They want to ensure that any deviation from the normal traffic pattern is quickly identified. What is the most effective way to achieve this?

   • AUse the Device-ID to verify that the trackers are running the latest firmware.
   • BEnable logging on the security policy and regularly review the logs for unusual traffic patterns.
   • CConfigure the trackers to send a heartbeat signal to the tracking server every minute.
   • DCreate a separate security policy that denies all traffic from the trackers to any destination other than the tracking server.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A security administrator is troubleshooting why a specific IoT thermostat is unable to connect to the HVAC control server. The thermostat has a Device-ID and is subject to a security policy that should allow the connection. What is the most useful log to examine first?

   • AThe traffic log for the security policy that applies to the thermostat's Device-ID.
   • BThe configuration log to see if the security policy was recently modified.
   • CThe threat log to see if the thermostat's traffic was blocked due to a security threat.
   • DThe system log for the firewall itself to check for any hardware failures.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   How do security policies, Device-IDs, and logging work together in IoT security?

   • ADevice-IDs identify devices, policies enforce rules based on those IDs, and logs record the resulting activity
   • BPolicies identify devices, logs enforce rules, and Device-IDs record activity
   • CThey are independent components that do not interact
   • DLogs identify devices, policies record activity, and Device-IDs enforce rules
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A large hospital network has a mix of IoT devices, including infusion pumps, patient monitors, and smart beds. The security team has implemented Device-IDs for each device type and created security policies to allow them to communicate with their respective servers. They have also enabled logging on all policies. During a recent audit, they found that some patient monitors are communicating with an external IP address that is not on the allowed list. The team needs to determine the source of the issue. What is the most effective approach to investigate this?

   • AChange the Device-ID for the patient monitors to a different classification to see if that resolves the issue.
   • BReview the configuration of the security policy to see if it was recently modified to allow traffic to the external IP.
   • CReview the traffic logs for the patient monitor Device-ID to identify the specific monitors and the external IP address they are communicating with.
   • DDisable the security policy for the patient monitors to stop all traffic and then re-enable it after the issue is resolved.
   Reveal Solution Discussion Select an answer first