Which strategy is crucial for enhancing the security of IoT devices?

Question

Options

• AEnabling Wi-Fi Protected Setup (WPS)
• BConducting penetration testing regularly
• CUsing non-standard communication protocols
• DAvoiding the use of encryption

• A
  15% (5)
• B
  76% (26)
• C
  6% (2)
• D
  3% (1)

Explanation

Regular penetration testing is essential for IoT security because it proactively identifies vulnerabilities before malicious actors can exploit them - IoT devices are notoriously difficult to patch post-deployment, making early discovery critical.

Why the distractors are wrong:

• A (WPS): WPS has well-documented vulnerabilities (e.g., the PIN brute-force attack) and is widely considered a security liability, not an enhancement.
• C (Non-standard protocols): "Security through obscurity" is a discredited strategy - attackers reverse-engineer custom protocols, and you lose the benefit of community-vetted standards.
• D (Avoiding encryption): Avoiding encryption is catastrophically wrong; it exposes data in transit to trivial interception, especially on shared networks.

Memory tip: Think "Test before they attack" - the only proactive, defense-in-depth measure among the choices is pen testing. The other three options either remove protections (D), introduce known weaknesses (A), or rely on obscurity (C), all of which violate foundational security principles.

No community discussion yet for this question.