nerdexam
Isaca

CGEIT · Question #617

An enterprise has decided to invest in Internet of Things (IoT) technology as part of its strategic plan. Which of the following presents the GREATEST risk to consider as part of the technical risk ma

The correct answer is A. Device vulnerabilities. When investing in Internet of Things (IoT) technology, device vulnerabilities pose the greatest technical risk due to potential exploitation and broad network impact.

Submitted by minji_kr· Apr 18, 2026Risk Optimization

Question

An enterprise has decided to invest in Internet of Things (IoT) technology as part of its strategic plan. Which of the following presents the GREATEST risk to consider as part of the technical risk management process?

Options

  • ADevice vulnerabilities
  • BTechnology integration
  • CDevice performance
  • DTechnology obsolescence

How the community answered

(52 responses)
  • A
    88% (46)
  • B
    4% (2)
  • C
    6% (3)
  • D
    2% (1)

Why each option

When investing in Internet of Things (IoT) technology, device vulnerabilities pose the greatest technical risk due to potential exploitation and broad network impact.

ADevice vulnerabilitiesCorrect

IoT devices often have limited processing power, memory, and update mechanisms, making them susceptible to various security vulnerabilities like weak authentication, unpatched firmware, and insecure network services. These vulnerabilities can be exploited to gain unauthorized access, compromise data, or launch broader network attacks, making them the most critical technical risk.

BTechnology integration

Technology integration is a significant implementation challenge but primarily affects project delivery and functionality, not the fundamental security posture of the deployed devices themselves.

CDevice performance

Device performance relates to the efficiency and responsiveness of the IoT devices; while important for operations, it is not typically considered the *greatest* technical risk compared to security breaches.

DTechnology obsolescence

Technology obsolescence is a long-term strategic concern regarding investment longevity, but immediate technical risk is more focused on current operational threats rather than future replacement cycles.

Concept tested: IoT security risks

Source: https://learn.microsoft.com/en-us/azure/iot-fundamentals/iot-security-architecture

Topics

#IoT Security#Technical Risk Management#Device Vulnerabilities#Cybersecurity

Community Discussion

No community discussion yet for this question.

Full CGEIT Practice