Which Security Control Is Mandatory for Cloud IoT Management?

Which of the following security measures is required when using a cloud-based platform for IoT management?

  1. Encrypted connection Source Reference Answer
  2. Federated identity
  3. Firewall
  4. Single sign-on

Community Votes

A
100%

100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.

Community Insight

This question tests your ability to identify foundational transport-layer protections for IoT communications, with the common trap being the selection of perimeter or identity controls instead of encryption.

Securing data in transit between IoT endpoints and cloud platforms is a core CompTIA Security+ objective. The community unanimously agrees that encrypted connections are essential to prevent interception and maintain data integrity over public networks.

Candidates sometimes select Firewalls or Single Sign-On, mistakenly prioritizing network filtering or user authentication over the fundamental requirement to protect raw telemetry and commands moving across untrusted infrastructure.

Community Discussion (3 comments)

a4e15bd 👍 6
A IOT devices often transmit sensitive data over networks and encryption ensures that this data is securely transmitted and protected from interception or tampering.
test_arrow 👍 1 Selected: A
A. Encrypted Connection Why? When using a cloud-based platform for IoT management, data is transmitted over the internet, making encryption critical to protect sensitive information. Encrypted connections (e.g., TLS/SSL, VPN, or IPSec) ensure that data remains secure in transit and prevent eavesdropping or man-in-the-middle (MitM) attacks. Many IoT devices are vulnerable due to weak security implementations, making encryption a fundamental security measure. Why Not the Others? B. Federated Identity – Useful for authentication across multiple systems but not specifically required for IoT cloud management. C. Firewall – Important for network security but doesn’t protect data in transit between IoT devices and the cloud. D. Single Sign-On (SSO) – Enhances authentication convenience but does not directly secure IoT data transmission.
qacollin 👍 1 Selected: A
A. GPT

Comments & Corrections

No comments yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

Expert Analysis

Why the Answer Is Correct

IoT devices routinely send sensitive operational data and receive remote commands via cloud platforms over the public internet. Implementing an encrypted connection (such as TLS/SSL or IPsec) is mandatory to guarantee confidentiality, integrity, and authenticity during transit. Without encryption, attackers could easily perform man-in-the-middle attacks, alter device configurations, or harvest credentials embedded in unsecured payloads.

Why the Other Options Are Wrong

Federated identity and single sign-on streamline user authentication but do not secure the underlying data stream between devices and the cloud. Firewalls enforce traffic policies at network boundaries but cannot inspect or protect payload contents once traffic traverses encrypted tunnels or public routing paths. These solutions address access management or perimeter defense rather than the immediate requirement for secure data transmission.

Community Comment Notes

Test-takers widely emphasize that IoT hardware often lacks built-in security features, making transport-level encryption the only reliable safeguard. Comment [1] correctly highlights that encryption directly prevents data interception and tampering during network transmission. Comment [2] reinforces this by noting how TLS/SSL specifically mitigates eavesdropping and MitM threats against inherently vulnerable IoT endpoints. The 100% consensus validates CompTIA’s emphasis on data-in-transit controls.

Official Reference

Exam Strategy

Always map the scenario to a specific data state—transit, at rest, or in use—to quickly isolate the correct cryptographic or network control. When questions mention cloud connectivity, mobile endpoints, or untrusted networks, prioritize encryption standards before considering identity or firewall solutions.

Related Analysis

During a SQL update of a database, a temporary field that wa

S-Grade

A security analyst developed a script to automate a trivial

A-Grade

Which of the following would be the best solution to deploy

S-Grade

Practice All SY0-701 Questions

Access 100 questions with complete answers and detailed explanations.

View Full SY0-701 Practice Test →

← Back to SY0-701 Study Guide