nerdexam
CompTIA

CAS-005 · Question #382

A security analyst discovers a new device on the company's dedicated IoT subnet during the most recent vulnerability scan. The scan results show numerous open ports and insecure protocols in addition

The correct answer is A. Harden the camera configuration.. Harden the camera configuration by changing default usernames and passwords, disabling unnecessary open ports, and ensuring that secure protocols (such as HTTPS, SSH, or others) are used instead of insecure ones (like HTTP or Telnet). This is a critical step in securing IoT devic

Submitted by akirajp· Mar 6, 2026Security Engineering

Question

A security analyst discovers a new device on the company's dedicated IoT subnet during the most recent vulnerability scan. The scan results show numerous open ports and insecure protocols in addition to default usernames and passwords. A camera needs to transmit video to the security server in the IoT subnet. Which of the following should the security analyst recommend to securely operate the camera?

Options

  • AHarden the camera configuration.
  • BSend camera logs to the SIEM.
  • CEncrypt the camera's video stream.
  • DPlace the camera on an isolated segment.

How the community answered

(31 responses)
  • A
    77% (24)
  • B
    13% (4)
  • C
    6% (2)
  • D
    3% (1)

Explanation

Harden the camera configuration by changing default usernames and passwords, disabling unnecessary open ports, and ensuring that secure protocols (such as HTTPS, SSH, or others) are used instead of insecure ones (like HTTP or Telnet). This is a critical step in securing IoT devices and protecting them from being exploited. Since the camera is part of the IoT subnet and has been identified with vulnerabilities such as default credentials and open ports, hardening the configuration is the most direct and effective solution to secure its operation.

Community Discussion

No community discussion yet for this question.

Full CAS-005 Practice