IoT Device Vulnerability Assessment Quiz

1. An assessor discovers multiple IoT devices with hardcoded API keys. What is the exposure?

Slower network connectivity

Authentication bypass and unauthorized API access

Increased device battery drain

Incompatibility with cloud services

2. An IoT device communicates with a cloud service using self-signed certificates. What risk exists?

Faster data transmission

Man-in-the-middle attacks and credential interception

Reduced power consumption

Improved device reliability

3. What does a vulnerability assessment report for IoT devices MUST include to be actionable?

Only a list of all devices on the network

Specific vulnerabilities, exposure level, and remediation steps

General statements about security importance

Device manufacturer contact information only

4. Which mitigation reduces IoT device exposure to brute-force authentication attacks?

Disabling all security features

Implementing rate limiting and strong authentication

Using default credentials

Removing device documentation

5. What is the primary challenge in assessing vulnerabilities across heterogeneous IoT ecosystems?

All IoT devices use identical protocols

Diverse manufacturers, protocols, and authentication methods

IoT devices don't support vulnerability scanning

Assessment requires physical device replacement

6. An IoT sensor stores user credentials in plaintext in memory. What attack becomes possible?

Physical device destruction only

Memory dumping to extract credentials

Automatic device deactivation

Increased network latency

7. Which assessment finding indicates an IoT device is at highest risk of compromise?

Device is connected to the network

Multiple unpatched vulnerabilities plus network accessibility

Device supports wireless connectivity

Device requires periodic restarts

8. Why are IoT devices often exposed on the public internet despite organizational policies?

They require public IP addresses for basic functionality

Users misconfigure port forwarding or cloud connectivity

All IoT devices mandate internet exposure

Firewalls automatically whitelist IoT traffic

9. What is a zero-day vulnerability in the context of IoT device assessment?

A vulnerability publicly known for over one year

An unknown security flaw with no available patch

A vulnerability that only affects desktop computers

A harmless device configuration error

10. Which vulnerability assessment tool is specifically designed for identifying insecure IoT protocols?

Microsoft Excel

Protocol analyzers and traffic inspection tools

Password managers

Email spam filters

11. Which of the following is the primary reason IoT devices are vulnerable to network attacks?

They use encrypted protocols exclusively

Limited computational resources restrict security implementation

They require constant internet connectivity

They are manufactured by a single vendor

12. What is the primary benefit of network segmentation for IoT device security?

Increases device processing speed

Limits lateral movement if a device is compromised

Eliminates all vulnerability risks

Reduces IoT device deployment costs

13. Which IoT protocol is most vulnerable to eavesdropping due to lack of encryption?

MQTT with TLS

CoAP over DTLS

Unencrypted HTTP API endpoints

HTTPS with certificate pinning

14. What vulnerability assessment priority should be assigned to an IoT camera with known CVEs and internet exposure?

Low—cameras don't access sensitive data

Critical—it provides remote access and persistence

Medium—it's not a primary business system

Informational—no immediate action needed

15. Which scanning method is most effective for discovering hidden or poorly documented IoT devices?

ARP scanning and service enumeration

Social media research

Physical device inspection only

Manufacturer documentation alone

16. What is a critical exposure when IoT devices operate on shared home or office networks?

They consume all available bandwidth

Lateral movement allows attackers to access other networked systems

They automatically disable firewalls

They prevent wireless connectivity

17. Which firmware vulnerability characteristic makes IoT devices particularly difficult to patch?

Firmware is stored in RAM only

Many devices lack automatic update mechanisms

Firmware requires daily manual reinstallation

Patches are incompatible with all operating systems

18. An IoT thermostat communicates via unencrypted HTTP. What exposure does this create?

Man-in-the-middle attacks and data interception

Increased device power consumption

Incompatibility with modern routers

Automatic firmware corruption

19. Which assessment technique involves passively monitoring network traffic to identify IoT devices?

Penetration testing

Network sniffing and packet analysis

Vulnerability scanning

Social engineering

20. What is the main security risk associated with default credentials on IoT devices?

Increased bandwidth consumption

Unauthorized access and device compromise

Slower network performance

Loss of device warranty coverage

Vuln Assessor Assessing IoT Device Exposure Quiz