Examkin

Soru

Zorluk: OrtaMobile Device and Embedded System Security

An IT support technician is deploying networked smart HVAC controllers throughout a company's corporate office. The embedded operating systems on these controllers cannot support third-party endpoint security software, centralized domain joining, or local user credential management. Which of the following security practices should the technician implement to BEST secure these embedded systems against unauthorized network access?

  1. Place the embedded controllers on a dedicated, isolated VLAN with restrictive firewall rulesCevap
  2. B
    Enroll the embedded controllers into an enterprise Mobile Device Management (MDM) solution to enforce passcode policies
  3. C
    Connect the embedded controllers to the primary internal wireless network using legacy WPA2-Personal authentication
  4. D
    Attach physical privacy screens to the control displays of each HVAC unit to prevent unauthorized viewing

Cevap

Place the embedded controllers on a dedicated, isolated VLAN with restrictive firewall rules
Embedded systems and IoT devices often lack hardware resources or software support for standard endpoint protection and administrative agents. Placed on an isolated Virtual Local Area Network (VLAN) with strict firewall rules, these devices can perform necessary network functions without exposing the rest of the enterprise network to pivoting attacks if compromised.

Adım Adım Çözüm

1
Analyze the device constraints described in the scenario
Identified that the HVAC controllers run lightweight embedded operating systems that lack support for security agents, domain joining, or traditional endpoint management.
Embedded systems frequently have resource constraints and fixed firmware that prevent installing standard security controls directly on the device.
2
Evaluate network-level mitigation techniques for unmanageable embedded systems
Determined that network segmentation (isolated VLANs and strict Access Control Lists) provides defense-in-depth.
Isolating embedded devices contains potential security breaches and prevents lateral movement into critical corporate network segments.

Anahtar Kavram

Embedded System Hardening and Network Segmentation
Bu soruyu puanla

Konular

Mobile Device and Embedded System Security

Bu konudan daha fazla soru