Examkin

Question

Difficulty: MediumMobile Device and Embedded System Security

An IT support technician is deploying networked smart HVAC controllers throughout a company's corporate office. The embedded operating systems on these controllers cannot support third-party endpoint security software, centralized domain joining, or local user credential management. Which of the following security practices should the technician implement to BEST secure these embedded systems against unauthorized network access?

  1. Place the embedded controllers on a dedicated, isolated VLAN with restrictive firewall rulesAnswer
  2. B
    Enroll the embedded controllers into an enterprise Mobile Device Management (MDM) solution to enforce passcode policies
  3. C
    Connect the embedded controllers to the primary internal wireless network using legacy WPA2-Personal authentication
  4. D
    Attach physical privacy screens to the control displays of each HVAC unit to prevent unauthorized viewing

Answer

Place the embedded controllers on a dedicated, isolated VLAN with restrictive firewall rules
Embedded systems and IoT devices often lack hardware resources or software support for standard endpoint protection and administrative agents. Placed on an isolated Virtual Local Area Network (VLAN) with strict firewall rules, these devices can perform necessary network functions without exposing the rest of the enterprise network to pivoting attacks if compromised.

Step-by-Step Solution

1
Analyze the device constraints described in the scenario
Identified that the HVAC controllers run lightweight embedded operating systems that lack support for security agents, domain joining, or traditional endpoint management.
Embedded systems frequently have resource constraints and fixed firmware that prevent installing standard security controls directly on the device.
2
Evaluate network-level mitigation techniques for unmanageable embedded systems
Determined that network segmentation (isolated VLANs and strict Access Control Lists) provides defense-in-depth.
Isolating embedded devices contains potential security breaches and prevents lateral movement into critical corporate network segments.

Key Concept

Embedded System Hardening and Network Segmentation
Rate this question

Topics

Mobile Device and Embedded System Security

More questions from this topic