An IT technician is configuring legacy embedded environmental monitoring units throughout a datacenter facility. The embedded operating system on these units cannot host endpoint security agents, lacks native full-disk encryption capabilities, and cannot be enrolled in the enterprise Mobile Device Management (MDM) solution. To prevent unauthorized access and protect the core network from lateral movement if a monitor is compromised, which of the following is the BEST primary security measure to implement?
- Isolate the monitoring units on a dedicated network segment with restricted firewall access and replace all factory default administrative passwords.Answer
- BEnroll the monitoring units into an enterprise containerization profile to enforce remote wipe capabilities and selective application isolation.
- CRequire WPA2-Enterprise with 802.1X mutual authentication using client-side digital certificates assigned to each monitoring unit.
- DInstall biometric access controls and security cable locks directly onto each individual environmental sensor enclosure.
Answer
Isolate the monitoring units on a dedicated network segment with restricted firewall access and replace all factory default administrative passwords.
Embedded systems often have limited computing resources and static firmware, making them incapable of running traditional MDM software, anti-malware agents, or containerized applications. Securing these systems relies on network micro-segmentation (isolating them on dedicated VLANs with strict firewall ACLs) and disabling or updating default vendor administrative credentials to reduce exposure.
Step-by-Step Solution
Key Concept
Embedded System Hardening and Network Segmentation
Estimated Time:2m 0s