312-50V12 · Question #156
You are a cybersecurity consultant for a healthcare organization that utilizes Internet of Medical Things (IoMT) devices, such as connected insulin pumps and heart rate monitors, to provide improved p
The correct answer is C. Use network segmentation to isolate IoMT devices from the main network.. To protect IoMT devices from ransomware, the main recommendation is to isolate them from the main network using network segmentation, preventing lateral movement of threats.
Question
Options
- ADisable all wireless connectivity on IoMT devices.
- BRegularly change the IP addresses of all IoMT devices.
- CUse network segmentation to isolate IoMT devices from the main network.
- DImplement multi-factor authentication for all IoMT devices.
How the community answered
(41 responses)- A7% (3)
- B10% (4)
- C80% (33)
- D2% (1)
Why each option
To protect IoMT devices from ransomware, the main recommendation is to isolate them from the main network using network segmentation, preventing lateral movement of threats.
Many IoMT devices rely on wireless connectivity for their functionality and data transmission, making disabling it impractical and often rendering the devices useless.
Regularly changing IP addresses offers negligible security against ransomware, which exploits vulnerabilities and misconfigurations rather than static network addresses, and creates operational complexity.
Network segmentation creates isolated zones, preventing ransomware from spreading from compromised IoMT devices to the main network or other critical systems. This minimizes the attack surface and blast radius, ensuring that a breach in one segment does not jeopardize the entire infrastructure.
Many IoMT devices lack the user interface or processing power to effectively support traditional multi-factor authentication (MFA), and MFA primarily secures user access, not device-level vulnerabilities exploited by ransomware.
Concept tested: IoMT device security through network segmentation
Source: https://learn.microsoft.com/en-us/azure/iot-fundamentals/iot-security-architecture#network-segmentation
Topics
Community Discussion
No community discussion yet for this question.