Which action MOST improves IoT device security?

Question

Options

• AChanging default passwords
• BDisabling firmware updates
• CUsing unencrypted communication channels
• DExposing devices directly to the internet

• A
  89% (24)
• C
  4% (1)
• D
  7% (2)

Explanation

Changing default passwords (A) is the single most impactful quick-win for IoT security because factory-default credentials (e.g., "admin/admin") are publicly known and actively scanned for by attackers - replacing them immediately closes a trivially exploited entry point.

Why the distractors are wrong:

• B - Disabling firmware updates leaves known vulnerabilities permanently unpatched, making devices more exploitable over time.
• C - Unencrypted communication channels expose data in transit to eavesdropping and man-in-the-middle attacks.
• D - Direct internet exposure removes any network perimeter protection, dramatically increasing the attack surface.

Memory tip: Think of it as "locking the front door first" - no matter how smart your IoT device is, leaving the default password is like shipping every lock with the same key printed on the box. Change the key, change the risk.

No community discussion yet for this question.