An organization is using Internet of Things (IoT) technology to support its business processes. Which of the following is the BEST approach for the use of IoT to ensure compliance with standard…

Question

Options

• AReset passwords for default IoT device accounts.
• BHard-code credentials into applications.
• CEvaluate IoT device vendors based on their usability.
• DIntegrate the IoT network with the organizational network.

• A
  93% (40)
• B
  5% (2)
• D
  2% (1)

Explanation

Resetting default passwords on IoT devices is a fundamental security baseline - factory credentials are publicly known and are among the first things attackers exploit, so changing them immediately aligns with standard hardening procedures.

Why the distractors fail:

• B is the opposite of secure - hard-coding credentials creates a vulnerability that can't be patched without redeploying code, violating credential management standards.
• C evaluates vendors on usability, not security posture; vendor selection should prioritize security certifications and patch history.
• D integrating IoT directly into the organizational network removes network segmentation, expanding the attack surface rather than containing it - IoT devices should typically live on an isolated VLAN.

Memory tip: Think "Default = Dangerous." Any device that ships with a known default password (admin/admin, etc.) is a ticking clock - the first security action is always to change it. This maps to the CIS Controls and NIST guidance on account management.

No community discussion yet for this question.