CRISC · Question #592
Which of the following presents the GREATEST security risk associated with Internet of Things (IoT) technology?
The correct answer is D. The lack of updates for vulnerable firmware. The greatest security risk associated with IoT devices stems from the pervasive lack of timely and effective firmware updates, leaving numerous vulnerabilities unpatched. This deficiency creates a large attack surface for threat actors, as many IoT devices are deployed and then…
Question
Which of the following presents the GREATEST security risk associated with Internet of Things (IoT) technology?
Options
- AThe inability to monitor via network management solutions
- BThe lack of relevant IoT security frameworks to guide the risk assessment process
- CThe heightened level of IoT threats via the widespread use of smart devices
- DThe lack of updates for vulnerable firmware
How the community answered
(41 responses)- A17% (7)
- B7% (3)
- C22% (9)
- D54% (22)
Why each option
The greatest security risk associated with IoT devices stems from the pervasive lack of timely and effective firmware updates, leaving numerous vulnerabilities unpatched. This deficiency creates a large attack surface for threat actors, as many IoT devices are deployed and then neglected regarding security patching.
While monitoring can be challenging for IoT, the *inability* to monitor isn't the *greatest* risk; the underlying vulnerability from unpatched firmware is the more fundamental problem.
The existence or lack of frameworks affects assessment, but the fundamental *technical* vulnerability that allows exploitation is the absence of crucial security updates.
Widespread use itself doesn't cause the risk, but rather the *vulnerable* nature of those widespread devices, which directly correlates to the problem of lacking security updates.
Many IoT devices are developed with minimal security considerations, have long lifespans, and often lack robust mechanisms or vendor support for ongoing firmware updates to patch discovered vulnerabilities. This widespread lack of updates for known vulnerabilities creates a massive, unpatched attack surface, making devices susceptible to exploitation over extended periods.
Concept tested: IoT security vulnerabilities
Source: https://learn.microsoft.com/en-us/azure/iot-fundamentals/iot-security-best-practices#secure-the-solution
Topics
Community Discussion
No community discussion yet for this question.