What capability is described as a security principle on the device layer?

What capability is described as a security principle on the device layer?

• A. Physical tamper detection and response on devices.
• B. Public key infrastructure managed only at the cloud.
• C. Manual on-site diagnostics only.
• D. Remote control of the IoT device allowing diagnostics and new configurations.

Answer: (D)

Remotely managing a device for ongoing diagnostics and configuration updates is a fundamental capability at the device level because it enables secure, scalable upkeep of distributed devices without needing physical access. When devices can be diagnosed, monitored, and reconfigured remotely, you can push security patches, adjust policies, and respond to emerging threats quickly. This kind of remote management relies on authenticated, secure communication and trusted updates, which helps maintain a trustworthy device state across a fleet. Physical tamper detection is also important for security, but it addresses a different aspect: detecting and responding to tampering rather than enabling regular, controlled management of devices. A cloud-only PKI approach shifts trust management away from the device and can undermine practical device-layer controls. Manual on-site diagnostics is not scalable for large deployments. In contrast, remote diagnostics and configuration updates align with the need for secure, continuous device governance.

Remotely managing a device for ongoing diagnostics and configuration updates is a fundamental capability at the device level because it enables secure, scalable upkeep of distributed devices without needing physical access. When devices can be diagnosed, monitored, and reconfigured remotely, you can push security patches, adjust policies, and respond to emerging threats quickly. This kind of remote management relies on authenticated, secure communication and trusted updates, which helps maintain a trustworthy device state across a fleet.

Physical tamper detection is also important for security, but it addresses a different aspect: detecting and responding to tampering rather than enabling regular, controlled management of devices. A cloud-only PKI approach shifts trust management away from the device and can undermine practical device-layer controls. Manual on-site diagnostics is not scalable for large deployments. In contrast, remote diagnostics and configuration updates align with the need for secure, continuous device governance.