An IT security technician is auditing embedded smart security cameras mounted around a company perimeter. The audit indicates that the devices broadcast their network services automatically using Universal Plug and Play (UPnP) and accept remote administrative connections over unencrypted HTTP. Which of the following is the best remediation measure to secure these embedded IoT devices?
- Disable UPnP on the devices, isolate them on a dedicated IoT network segment, and enforce HTTPS for administrative connections.Cevap
- BDeploy enterprise Mobile Device Management (MDM) containerization profiles and configure remote wipe parameters on each camera.
- CConfigure WPA2-Personal using Temporal Key Integrity Protocol (TKIP) across all camera wireless interfaces.
- DInstall physical security barriers such as vehicle bollards and security gates adjacent to the camera mounting poles.
Cevap
Disable UPnP on the devices, isolate them on a dedicated IoT network segment, and enforce HTTPS for administrative connections.
The correct answer addresses the specific vulnerabilities identified in the audit. Embedded IoT devices require attack surface reduction (disabling unneeded services like UPnP), encryption of management channels (HTTPS), and logical isolation (dedicated IoT VLAN) to prevent lateral movement across the internal corporate network.
Adım Adım Çözüm
Anahtar Kavram
Embedded System and IoT Security Hardening