Which Security Control Is Mandatory for Cloud IoT Management?

SY0-701 By islever Editorial Last updated

Short answer

A Encrypted connection

Question

Which of the following security measures is required when using a cloud-based platform for IoT management?
  1. Encrypted connection Correct Answer
  2. Federated identity
  3. Firewall
  4. Single sign-on

Key Takeaways

This question tests your ability to identify foundational transport-layer protections for IoT communications, with the common trap being the selection of perimeter or identity controls instead of encryption.

Securing data in transit between IoT endpoints and cloud platforms is a core CompTIA Security+ objective. The community unanimously agrees that encrypted connections are essential to prevent interception and maintain data integrity over public networks.

Common mistake: Candidates sometimes select Firewalls or Single Sign-On, mistakenly prioritizing network filtering or user authentication over the fundamental requirement to protect raw telemetry and commands moving across untrusted infrastructure.

Expert Analysis

Why the Answer Is Correct

IoT devices routinely send sensitive operational data and receive remote commands via cloud platforms over the public internet. Implementing an encrypted connection (such as TLS/SSL or IPsec) is mandatory to guarantee confidentiality, integrity, and authenticity during transit. Without encryption, attackers could easily perform man-in-the-middle attacks, alter device configurations, or harvest credentials embedded in unsecured payloads.

Why the Other Options Are Wrong

Federated identity and single sign-on streamline user authentication but do not secure the underlying data stream between devices and the cloud. Firewalls enforce traffic policies at network boundaries but cannot inspect or protect payload contents once traffic traverses encrypted tunnels or public routing paths. These solutions address access management or perimeter defense rather than the immediate requirement for secure data transmission.

Community Comment Notes

Test-takers widely emphasize that IoT hardware often lacks built-in security features, making transport-level encryption the only reliable safeguard. Comment [1] correctly highlights that encryption directly prevents data interception and tampering during network transmission. Comment [2] reinforces this by noting how TLS/SSL specifically mitigates eavesdropping and MitM threats against inherently vulnerable IoT endpoints. The 100% consensus validates CompTIA’s emphasis on data-in-transit controls.

Official Reference

These links open the official vendor documentation in a new tab.

Exam Strategy

Always map the scenario to a specific data state—transit, at rest, or in use—to quickly isolate the correct cryptographic or network control. When questions mention cloud connectivity, mobile endpoints, or untrusted networks, prioritize encryption standards before considering identity or firewall solutions.

Community Votes

A
100%

100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 3 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 3

  1. a4e15bd 👍 6
    A IOT devices often transmit sensitive data over networks and encryption ensures that this data is securely transmitted and protected from interception or tampering.
  2. test_arrow 👍 1 Answered A
    A. Encrypted Connection Why? When using a cloud-based platform for IoT management, data is transmitted over the internet, making encryption critical to protect sensitive information. Encrypted connections (e.g., TLS/SSL, VPN, or IPSec) ensure that data remains secure in transit and prevent eavesdropping or man-in-the-middle (MitM) attacks. Many IoT devices are vulnerable due to weak security implementations, making encryption a fundamental security measure. Why Not the Others? B. Federated Identity – Useful for authentication across multiple systems but not specifically required for IoT cloud management. C. Firewall – Important for network security but doesn’t protect data in transit between IoT devices and the cloud. D. Single Sign-On (SSO) – Enhances authentication convenience but does not directly secure IoT data transmission.
  3. qacollin 👍 1 Answered A
    A. GPT

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

CCTV and Surveillance Signs as Security Controls

S-grade

When Should an Engineer Decommission a Network Device?

S-grade

Which Controls Secure Remote Access to Sensitive PHI Applications?

S-grade

Which Zero Trust Component Belongs to the Data Plane?

S-grade

Practice All SY0-701 Questions

Access 100 questions with complete answers and detailed explanations.

View Full SY0-701 Practice Test →

← Back to SY0-701 Study Guide