A penetration tester is assessing an IoT thermostat used in a smart home system.

Vendor: ECCouncil
Product: 312-50v13
Update on: Jan 30, 2026
Questions: 873

ECCouncil 312-50v13 Question Answer

A penetration tester is assessing an IoT thermostat used in a smart home system. The device communicates with a cloud server for updates and commands. The tester discovers that communication between the device and the cloud server is not encrypted. What is the most effective way to exploit this vulnerability?

Conduct a Cross-Site Scripting (XSS) attack on the thermostat’s web interface

Perform a brute-force attack on the thermostat’s local admin login

Execute a SQL injection attack on the cloud server's login page

Use a man-in-the-middle (MitM) attack to intercept and manipulate unencrypted communication