Low-Cost IoT in Infrastructure: Data Storage vs. Country of Origin

SY0-701 By islever Editorial Last updated

Given a scenario, apply common security techniques to computing resources. Compare and contrast concepts and strategies to protect data. Explain common threat vectors and attack surfaces.

Short answer

D Choose storage of data, because low-cost IoT devices in infrastructure environments often store sensitive operational data without adequate encryption or access controls.

Question

Which of the following is most likely a security concern when installing and using low-cost IoT devices in infrastructure environments?
  1. Country of origin
  2. Device responsiveness
  3. Ease of deployment
  4. Storage of data Correct Answer

Key Takeaways

The exam tests the operational boundary between supply-chain origin risk and device-level data protection; the trap is selecting the procurement-oriented 'country of origin' over the concrete risk that low-cost IoT devices store sensitive data without encryption or access controls.

This SY0-701 question asks whether country of origin or data storage is the more likely security concern for low-cost IoT devices in infrastructure environments. The verified answer is D: insecure storage of data.

Common mistake: Selecting A (country of origin) is the common mistake: it is a legitimate supply-chain concern, but it is not tied to the low-cost constraint and is less directly realized while the device is installed and handling infrastructure data than insecure storage is.

Expert Analysis

The two live candidates Options B and C are not security concerns in the ordinary sense: device responsiveness is a performance trait, and ease of deployment is an operational convenience. That leaves A (country of origin) and D (storage of data). Both can be real, but the exam asks for the most likely concern when low-cost IoT devices are installed and used in infrastructure environments.

Why country of origin is the weaker fit Country of origin is a supply-chain and third-party risk. It matters during procurement and vendor due diligence, and it can become severe in critical infrastructure, but it is not caused by the device being low-cost. A high-cost device from the same country would carry the same origin concern. The question's low-cost qualifier points to design trade-offs—reduced encryption, weak access controls, and minimal secure development—rather than to the manufacturing country.

Why storage of data is the boundary case Low-cost IoT devices typically collect telemetry, sensor readings, or operational data and often store it locally or forward it to cloud services without strong encryption or access restrictions. In an infrastructure environment, that data can reveal sensitive operational details. The risk is realized during installation and use, which is exactly the phase named in the prompt. Community explanations that favour D describe unencrypted local storage, cloud exposure, and weak access controls; those are concrete device-level failures, not procurement abstractions.

Verdict The scenario falls on the operational side of the boundary. D (storage of data) is the most likely security concern; A is a parallel supply-chain risk but not the best answer to installing and using low-cost IoT devices.

Exam Strategy

When a question pairs a procurement term like 'country of origin' with an operational term like 'storage of data,' ask which risk is realized while the device is installed and running. Eliminate non-security options such as responsiveness and ease of deployment first, then choose the answer tied to the low-cost constraint—usually weak encryption or access controls. Apply the same filter to any IoT scenario: supply-chain worries belong to vendor due diligence, while insecure data handling is a device-level security failure.

Frequently Asked Questions

Why is storage of data a bigger concern than country of origin for low-cost IoT devices?

Low-cost devices often cut corners on encryption and access controls, so the data they collect in infrastructure environments can be exposed at rest or in transit. Country of origin is a supply-chain risk but is less directly tied to the device's operational handling of sensitive data.

Are country-of-origin risks irrelevant for IoT procurement?

No. Country of origin remains a supply-chain and third-party risk concern, especially for critical infrastructure, but it is not the most likely operational security issue emphasized for low-cost IoT devices in this SY0-701 scenario.

What other security issues should I check for low-cost IoT devices?

Watch for weak default credentials, unpatched firmware, lack of secure update mechanisms, and unencrypted data transmission, all of which compound the data-storage risk in infrastructure environments.

More SY0-701 FAQ →

Discussion 8 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 8

  1. iliecomptia 👍 10 Answered D
    From CompTIA guide: The sheer volume of data generated by IoT devices can make securing and protecting sensitive information difficult. As more devices are connected to the Internet, there is an increasing risk of data breaches and cyberattacks, which can result in the theft of personal and sensitive data. A- does not make sense. B&C are not security concerns but rather performance concerns.
  2. musaabokisec 👍 6 Answered A
    Chat GPT A. Country of origin Explanation: The country of origin of low-cost IoT devices is often a major security concern, especially in critical infrastructure environments. Devices manufactured in certain countries may pose risks due to: Supply chain vulnerabilities: Devices could include backdoors, malicious firmware, or compromised components. Lack of regulatory oversight: Low-cost devices may not comply with international security standards. Potential espionage: Some governments may influence manufacturers in their countries to include mechanisms for surveillance or data collection. Poor security practices: Devices from some sources may have weak default configurations, such as hardcoded credentials or unpatched vulnerabilities. These risks make the country of origin a critical factor when evaluating the security of IoT devices for infrastructure environments.
  3. MarysSon 👍 3 Answered A
    The question is not about storage. Storage devices are a small subset of IoT devices. Country of origin is a more pressing concern, particularly for organizations that need to protect intellectual property or classified information. Devices from hostile countries can be engineered to steal information or plant viruses.
  4. 9149f41 👍 2 Answered D
    Storage of data: This is a critical security concern. Low-cost IoT devices often lack robust security features, making them vulnerable to data breaches, unauthorized access, or misuse of sensitive information. Poorly secured data storage can lead to significant risks in infrastructure environments.
  5. squishy_fishy 👍 1 Answered D
    GPT: The correct answer is: ✅ D. Storage of data Explanation (per CompTIA Security+ and official guidance): Low-cost IoT devices often: Lack encryption or secure data storage Do not follow robust security development lifecycles Store sensitive information locally or in the cloud without proper protections This makes data storage the most likely security concern, especially in environments where these devices collect or transmit: Sensor data Video feeds Network or user activity logs The CompTIA Security+ guide specifically highlights that: “The sheer volume of data generated by IoT devices can make securing and protecting sensitive information difficult… increasing risk of data breaches and cyberattacks.”
Show 3 more comments
  1. 5a11b63 👍 1 Answered D
    Low-cost IoT devices often come with limited security features, and one of the biggest risks is how they store and handle sensitive data. Here's why: 🗄️ Unencrypted storage: Many budget devices store data locally without encryption, making it vulnerable to theft. 🌐 Cloud exposure: Some transmit data to third-party servers, often without clear privacy policies. 🔓 Weak access controls: Poor authentication mechanisms can allow unauthorized access to stored data. In infrastructure environments—where these devices might monitor critical systems or collect operational data—this becomes a serious vulnerability.
  2. VoidDrive 👍 1 Answered A
    Storage of data is a concern for all IoT devices. "A. Country of origin" is a security concern for low-cost IoT devices. Google "infrastructure hardware spying".
  3. AndreyME 👍 1 Answered A
    Option A, since it said IoT low cost in critical infrastructure environments.

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

CCTV and Surveillance Signs as Security Controls

S-grade

When Should an Engineer Decommission a Network Device?

S-grade

Which Controls Secure Remote Access to Sensitive PHI Applications?

S-grade

Which Zero Trust Component Belongs to the Data Plane?

S-grade

Practice All SY0-701 Questions

Access 100 questions with complete answers and detailed explanations.

View Full SY0-701 Practice Test →

← Back to SY0-701 Study Guide