Which characteristic of IoT devices most increases the overall attack surface of a network?

• They use only wired connections

• They are typically isolated from the internet

• They often have weak default security settings

• They cannot be remotely managed

A company deploys smart lighting and HVAC systems in its office building. Soon after, unauthorized temperature changes are noticed. Which security strategy BEST prevents this issue?

• Using only consumer-grade IoT devices

• Connecting building systems directly to the production LAN

• Creating isolated network segments for building automation devices

• Allowing all traffic to pass through by default

Antion works for a water treatment facility and needs to ensure that pumps and sensors located miles away are operating correctly at all times. Which industrial system is primarily responsible for real-time monitoring and control of this remote equipment?

• IDS

• SCADA

• SIEM

• NAS

A manufacturing plant connects its ICS network to the corporate IT network for easier monitoring. Soon after, attackers exploit vulnerabilities to access critical systems. Which action would BEST reduce this risk?

• Allow ICS devices full access to the internet

• Isolate management traffic and monitor cross-network links

• Disable all access controls

• Replace Ethernet with coaxial cabling

Damian is setting up a smart home system with various IoT devices, such as smart thermostats and security sensors. He notices that standard networking solutions (like traditional Wi-Fi or Ethernet) are not always effective for these devices. Why might this be the case?

• IoT devices never use IP addressing

• IoT devices require extremely high bandwidth

• IoT devices may have unique connectivity requirements

• IoT devices only operate offline

A company installs multiple consumer-grade IoT devices in its network. Within weeks, unusual outbound traffic is detected. What is the MOST likely reason?

• Devices are over-patched

• Default admin interfaces were left unsecured

• Devices were placed in a DMZ

• The network had too many VLANs

Which mitigation strategy BEST addresses the increased attack surface created by adding IoT devices to a network?

• Disable all encryption

• Conduct regular audits and segmentation

• Allow all inbound traffic

• Share admin accounts across devices

Which access control model allows the OWNER of a resource to determine who can access it?

• Role-Based Access Control (RBAC)

• Mandatory Access Control (MAC)

• Discretionary Access Control (DAC)

• Attribute-Based Access Control (ABAC)

A company assigns permissions based on employees’ job titles such as 'HR,' 'Manager,' or 'Technician.' Which access control model is being used?

• DAC

• RBAC

• MAC

• ABAC

An IT administrator can create new user accounts, reset passwords, and modify group memberships. To prevent this account from being abused, the security team implements a system that controls, monitors, and audits privileged accounts. Which term BEST describes this system?

• Separation of duties

• PAM

• Least privilege

• NAC