What best mitigates a legacy IoT OS vulnerability quickly?

SY0-701 By islever Editorial Last updated Oct 9, 2026

Given a scenario, select mitigation techniques or controls to secure an enterprise environment.

Short answer

C Segmentation quickly isolates legacy IoT devices with unpatchable OS network access vulnerabilities from critical network resources.

Question

A newly identified network access vulnerability has been found in the OS of legacy IoT devices. Which of the following would best mitigate this vulnerability quickly?

Insurance
Patching
Segmentation Correct Answer
Replacement

Key Takeaways

The question tests whether you know that legacy/unsupported IoT devices usually cannot be patched, so the fastest mitigation is network segmentation rather than patching or replacement.

A newly identified network access vulnerability in the OS of legacy IoT devices cannot be patched if the devices are unsupported. This SY0-701 study page establishes segmentation (C) as the fastest mitigation, isolating the vulnerable IoT devices from the rest of the enterprise network.

Common mistake: Many candidates pick patching (B) because it is the textbook fix for a software vulnerability, but legacy IoT devices typically no longer receive OS updates, so patching is neither available nor quick.

Expert Analysis

Why the Answer Is Correct

Network segmentation (C) is correct because it is a compensating control that can be applied immediately without waiting on the device vendor. By placing the legacy IoT devices in an isolated VLAN or restricted subnet with strict access control lists, the enterprise limits the network access an attacker could abuse through the OS vulnerability. This matches the stem's demand for the fastest mitigation, since it does not require a patch that may not exist or a hardware refresh cycle. Segmentation also buys time to monitor, contain, and later replace or upgrade the devices on a planned schedule.

Why the Other Options Are Wrong

Insurance (A) transfers financial risk rather than mitigating the technical vulnerability; it does nothing to stop exploitation. Patching (B) is the normal remediation for a software flaw, but legacy IoT devices are typically past end-of-support, so no vendor patch exists and constrained hardware or firmware may not support updates. Replacement (D) is the most permanent fix, but it is not the quickest: procurement, compatibility testing, OT/IT integration, and downtime make it a slow, planned project.

Community Comment Notes

Community consensus strongly favors segmentation. KrazyMonkey noted, "I've not heard of patching legacy devices," and CyberSecurity24 explained that "patches may no longer be provided" for legacy devices, making patching unsuitable as a quick mitigation. AutoroTink openly retracted an earlier patching answer, while dbrowndiver emphasized that legacy IoT devices often cannot be quickly patched or replaced due to operational constraints. ProudFather argued for replacement, but that view overlooks the question's emphasis on speed.

Exam Strategy

When a question says 'legacy' or 'unsupported,' eliminate patching immediately unless a patch source is stated. Look for the control that delivers the fastest risk reduction—usually segmentation or another compensating control—while treating replacement as the durable but slower option.

Frequently Asked Questions

Why isn't patching the fastest fix for a legacy IoT OS vulnerability?

Legacy IoT devices usually no longer receive vendor OS updates, and constrained hardware can make patch deployment impractical, so patching is not a quick mitigation.

Why doesn't replacement beat segmentation for the legacy IoT devices?

Replacement fixes the root cause permanently but requires procurement, compatibility testing, and operational downtime, so it is slower than isolating the devices with segmentation.

More SY0-701 FAQ →

Community Votes

100%

100% of anonymous learners picked answer C. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 12 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 12

KrazyMonkey 👍 21 Answered C

I've not heard of patching legacy devices... Professor Messer would be disappointed.
CyberSecurity24 👍 11 Answered C

Patching is a common method for addressing vulnerabilities. However, in the case of legacy devices, patches may no longer be provided, or applying new patches may be difficult. Therefore, it is not suitable as a quick mitigation method, making C. Segmentation the correct answer.
SHADTECH123 👍 6 Answered C

Segmentation would best mitigate the network access vulnerability in the OS of legacy IoT devices quickly. By segmenting the network, you can isolate the vulnerable devices from the rest of the network, thereby limiting potential access and reducing the risk of exploitation. This is often faster than patching or replacing the devices, especially if patches are not immediately available or replacement is not feasible in the short term.
AutoroTink 👍 5 Answered C

I retract my previous answer. You can't do patching on legacy stuff...MY BAD!
dbrowndiver 👍 4 Answered C

Legacy IoT Devices: These devices often lack the ability to be quickly patched or replaced due to hardware limitations or operational constraints. Segmentation offers a rapid response by limiting access and isolating these devices from critical network resources. Access Control: By segmenting the network, you can apply stricter access controls and monitoring, ensuring that any potential compromise of the IoT devices does not affect the broader network.

Show 7 more comments

shady23 👍 3 Answered C

Question #: 729 Topic #: 1 [All SY0-601 Questions] A newly identified network access vulnerability has been found in the OS of legacy IoT devices. Which of the following would best mitigate this vulnerability quickly? A. Insurance B. Patching C. Segmentation D. Replacement Patching doesn't work as it's legacy, Segregation is the quickest option of the remaining three.
e5c1bb5 👍 3 Answered C

theres always trolls/mislead people. legacy devices arent supported anymore. segmentation is the way to go. theres always vulnerabilities in IOT devices. what do you do if you need to use them? SEGMENTATION.
hasquaati 👍 3 Answered C

Key word is legacy device. Patches may not be available. Segmentation will also be a valid solution for legacy IoT devices. Answer is C.
Yoez 👍 1 Answered B

The option that would best mitigate the vulnerability quickly is patching (option B). Patching involves applying updates or fixes provided by the software vendor to address known vulnerabilities or weaknesses in the system. By promptly patching the OS of the legacy IoT devices, the vulnerability can be mitigated, reducing the risk of exploitation by malicious actors. This is typically the quickest and most direct way to address known vulnerabilities and enhance the security posture of the devices.
ProudFather 👍 1 Answered D

D. Replacement Since the vulnerability is in the OS of legacy IoT devices, patching might not be feasible due to the age of the devices and the lack of vendor support for updates. In such cases, the most effective mitigation strategy is to replace the vulnerable devices with newer models that have security updates and support. While segmentation and insurance can be helpful, they are not the primary solution to address the vulnerability itself.
AutoroTink 👍 1 Answered B

Network segmentation could limit the potential impact of the vulnerability but does not address the vulnerability in the devices.
Drey09 👍 1 Answered C

He's telling mitigate, replace will soulve the problem

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Practice All SY0-701 Questions

Access 100 questions with complete answers and detailed explanations.

View Full SY0-701 Practice Test →

← Back to SY0-701 Study Guide