What are effective countermeasures against IoT threats? (Choose two)

Question

Options

• ARegularly updating device firmware
• BUsing default device credentials
• CSegregating IoT devices on separate network segments
• DDisabling unnecessary services and ports

• A
  88% (14)
• B
  6% (1)
• D
  6% (1)

Explanation

Regularly updating device firmware (A) patches known vulnerabilities that attackers actively exploit, closing security gaps as they are discovered. Segregating IoT devices on separate network segments (C) is a critical defense-in-depth strategy: if a device is compromised, network isolation prevents lateral movement to sensitive systems. Option B (default credentials) is actively harmful - default usernames and passwords are publicly known and are among the first things attackers try, making them a leading cause of IoT breaches. Option D is actually a valid security practice, which is why it's a tricky distractor; however, the question asks for only two answers, and A and C represent the more foundational, widely-cited countermeasures on most security frameworks (like NIST and CIS).

Memory tip: Think "Update and Isolate" - keep firmware current (A) and keep IoT devices walled off from the rest of your network (C). These two cover the patch and contain pillars of IoT security.

No community discussion yet for this question.