4.5 Quiz: Securing IoT and Embedded Devices

🎯 Quiz Instructions

Answer all 5 questions. Click Check Answer after each to see feedback. Score appears after the last question. This is the last quiz in Unit 4 — target: 4 of 5 or better.

00:00

✎ Lesson 4.5 Quiz
Question 1 of 5 A manufacturing plant operates 300 industrial controllers that CANNOT be patched (vendor abandoned firmware support; regulatory certification blocks replacement for three more years). Which single defensive control provides the BEST risk reduction during that three-year window?
Question 2 of 5 A vendor selling IoT sensors to U.S. federal agencies must meet specific NIST security requirements: no hardcoded default passwords, support for receiving patches, and a documented coordinated-vulnerability-disclosure process. Which piece of U.S. legislation imposes these requirements?
Question 3 of 5 Consider the following statements about IoT and embedded security.
I. Many IoT devices cannot run traditional antivirus because they lack sufficient CPU and memory.
II. All industrial controllers are replaced every two years, so old firmware is rarely a concern.
III. Placing unpatchable devices on the same VLAN as user workstations is a recommended defense.
Which of the statements is TRUE?
Question 4 of 5 An IoT device manufacturer wants to prevent any tampered or unsigned firmware from running, even if an attacker gains physical access and swaps the flash storage. The bootloader must cryptographically verify each stage before transferring control. Which technology BEST describes this design?
Question 5 of 5 A security auditor asks a manufacturing firm to produce an authoritative list showing every IoT device in the organization, along with each device’s firmware version, owner, network segment, and planned replacement date. The firm cannot. Which fundamental IoT security practice is missing?
0 / 5 Quiz complete — you’ve finished Unit 4! Review any missed questions, then check out the Unit 4 Exam.

Get in Touch

Whether you're a student, parent, or teacher — I'd love to hear from you.

Just want free AP CS resources?

Enter your email below and check the subscribe box — no message needed. Students get daily practice questions and study tips. Teachers get curriculum resources and teaching strategies.

Typically responds within 24 hours

Message Sent!

Thanks for reaching out. I'll get back to you within 24 hours.

🏫 Welcome, fellow educator!

I offer curriculum resources, practice materials, and study guides designed for AP CS teachers. Let me know what you're looking for — whether it's classroom materials, a guest speaker, or Teachers Pay Teachers resources.

Email

[email protected]

📚

Courses

AP CSA, CSP, & Cybersecurity

Response Time

Within 24 hours

Prefer email? Reach me directly at [email protected]