Examkin

Question

Difficulty: MediumMobile Device and Embedded System Security

An IT security technician is auditing embedded smart security cameras mounted around a company perimeter. The audit indicates that the devices broadcast their network services automatically using Universal Plug and Play (UPnP) and accept remote administrative connections over unencrypted HTTP. Which of the following is the best remediation measure to secure these embedded IoT devices?

  1. Disable UPnP on the devices, isolate them on a dedicated IoT network segment, and enforce HTTPS for administrative connections.Answer
  2. B
    Deploy enterprise Mobile Device Management (MDM) containerization profiles and configure remote wipe parameters on each camera.
  3. C
    Configure WPA2-Personal using Temporal Key Integrity Protocol (TKIP) across all camera wireless interfaces.
  4. D
    Install physical security barriers such as vehicle bollards and security gates adjacent to the camera mounting poles.

Answer

Disable UPnP on the devices, isolate them on a dedicated IoT network segment, and enforce HTTPS for administrative connections.
The correct answer addresses the specific vulnerabilities identified in the audit. Embedded IoT devices require attack surface reduction (disabling unneeded services like UPnP), encryption of management channels (HTTPS), and logical isolation (dedicated IoT VLAN) to prevent lateral movement across the internal corporate network.

Step-by-Step Solution

1
Identify vulnerabilities in the embedded camera setup.
Discovered exposed UPnP discovery services and cleartext HTTP administration channels.
Embedded IoT devices often ship with risky convenience features enabled by default.
2
Apply embedded system hardening controls.
Disable UPnP to block unauthorized network discovery, restrict management traffic to HTTPS, and isolate devices on a segmented VLAN.
Minimizes the attack surface and prevents unauthorized network traversal if a single camera is compromised.

Key Concept

Embedded System and IoT Security Hardening
Rate this question

Topics

Mobile Device and Embedded System Security

More questions from this topic