As customers deploy more Internet of Things (IoT) devices, what is one implication for potential Aruba customers?

Question

Options

• AContinuous monitoring and NAC cannot detect to IoT devices because they do not appear like
• BMost IoT devices introduce vulnerabilities because they don't utilize any standard set of security
• CIoT devices require special management software because they use different wireless standards
• DIoT devices require cloud management and data storage, so customers need to have a hybrid

• A
  8% (4)
• B
  85% (44)
• C
  6% (3)
• D
  2% (1)

Explanation

Option B is correct because IoT devices - smart sensors, cameras, industrial controllers, medical equipment, etc. - are notorious for shipping with weak or hardcoded credentials, no patch mechanisms, and proprietary firmware that skips standard security protocols like 802.1X or TLS, making them a major attack surface on any network.

Why the distractors are wrong:

• A is incorrect - Aruba's continuous monitoring and NAC (Network Access Control) can detect IoT devices; in fact, device fingerprinting and profiling IoT endpoints is a core Aruba ClearPass use case.
• C is incorrect - IoT devices largely use the same wireless standards (Wi-Fi, Zigbee, Bluetooth); they don't require special management software just because of wireless differences, though they do need policy enforcement.
• D is incorrect - IoT devices don't inherently require cloud management or storage; many run entirely on-premises, and this is not the primary security concern they introduce.

Memory tip: Think of IoT as "Internet of Threats" - the security implication always circles back to the fact that these devices were built for function, not security, making option B the reliable choice whenever IoT vulnerabilities appear on an exam.

No community discussion yet for this question.