IoT data collection exposes what cybersecurity risk when devices are connected to the internet?

• A. VPN
• B. Attack Vector
• C. Encryption
• D. Firewall

Answer: (B)

When devices are connected to the internet for data collection, the risk comes from the various paths an attacker can use to reach and exploit them. This is the idea of an attack vector—the route or method a hacker employs to gain unauthorized access or cause harm. IoT devices often introduce multiple potential vectors: weak or default credentials, insecure interfaces, unpatched firmware, exposed APIs, or unencrypted data in transit. Each of these represents a possible entry path, so the overall cybersecurity risk is driven by the number and quality of attack vectors available.

Protective measures like a VPN, encryption, and a firewall are defensive controls, not the risk itself. A VPN creates a secure tunnel for remote access, encryption protects the content of data, and a firewall filters traffic to block unauthorized access. While important for reducing risk, they describe defenses rather than the exposure created by internet-connected IoT data collection.