ISACA • IoT-Fund
Validates foundational knowledge of Internet of Things technology, covering IoT network components, sensors and actuators, middleware, physical security systems, data authentication and protection methods, and IoT architecture elements.
Questions
630
Duration
120 minutes
Passing Score
65%
Difficulty
FoundationalLast Updated
Feb 2026
The ISACA IoT Fundamentals Certificate validates foundational knowledge of Internet of Things concepts and the technologies that enable IoT ecosystems. The exam assesses a candidate's understanding of IoT network architecture, the roles of sensors and actuators, middleware functionality, physical security systems, and data authentication and protection methods. It is part of ISACA's Certified in Emerging Technology (CET) Certification program, which encompasses four certificate exams — Cloud Computing Fundamentals, Blockchain Fundamentals, IoT Fundamentals, and AI Fundamentals — that together constitute the full CET credential.
The certification employs a hybrid assessment model, combining traditional knowledge-based multiple-choice questions with performance-based questions delivered in a live virtual lab environment. This approach ensures candidates can not only articulate IoT principles but also demonstrate practical skills in applying IoT technologies. The exam covers real-world IoT use cases across industries including healthcare, government, utilities, and enterprise operations, with particular emphasis on security risks and governance considerations.
The IoT Fundamentals Certificate is designed for individuals at the beginning of their IoT journey, including students, recent graduates, and career changers seeking to establish credibility in emerging technology domains. IT professionals looking to broaden their skills into IoT, as well as cybersecurity, risk, and audit professionals who need to evaluate IoT environments and their associated controls, are well-suited for this credential.
Technical and business analysts who bridge IoT technology with organizational strategy, consultants and solution architects advising on IoT implementations, and government or utility professionals working on smart infrastructure initiatives are also prime candidates. Because there are no prerequisites, the exam is accessible to anyone with a foundational interest in IoT, regardless of prior formal technology credentials.
ISACA imposes no formal prerequisites for the IoT Fundamentals Certificate. Candidates can register at any time without meeting prior educational or professional requirements, making it one of the most accessible entry points in ISACA's credentialing portfolio.
While no prior experience is required, candidates with a basic familiarity with networking concepts, general IT infrastructure, and cybersecurity principles will find the material more approachable. ISACA recommends using its official preparation resources — the self-guided online course, the lab package, and the study guide — to build the necessary foundational knowledge before attempting the exam.
The IoT Fundamentals exam consists of 60 questions delivered in a computer-based, remotely proctored format over a 2-hour time limit. Questions blend traditional knowledge-based multiple-choice items with performance-based questions set in a virtual lab environment, assessing both conceptual understanding and practical application. Candidates must achieve a passing score of 65% or higher.
The exam is administered online with continuous registration — there are no restricted testing windows. Exam eligibility is valid for 12 months from the date of registration, and appointments can be scheduled as early as 48 hours after payment. Candidates receive four total attempts within any rolling 12-month period. Rescheduling is permitted without penalty provided at least 48 hours' notice is given.
Earning the IoT Fundamentals Certificate signals to employers a verified, vendor-neutral understanding of IoT concepts validated by ISACA, a globally recognized IT governance and cybersecurity credentialing body. The certificate serves as a stepping stone toward ISACA's full Certified in Emerging Technology (CET) Certification, which requires passing all four CET-track exams (Cloud Computing, Blockchain, IoT, and AI Fundamentals) and submitting an application. Holding the CET designation positions professionals across roles such as IoT solution architect, cybersecurity analyst, IT risk consultant, technical analyst, and smart infrastructure engineer.
The IoT market continues to expand rapidly across sectors including industrial automation, healthcare, smart cities, and connected consumer devices, driving consistent enterprise demand for professionals who can evaluate IoT risk and governance. While salary data specific to this certificate is not published by ISACA, professionals who pair this credential with broader cybersecurity or cloud certifications — such as ISACA's CISM or CISA — report enhanced positioning for mid-to-senior roles in IT audit, risk management, and emerging technology advisory functions.
1. A medical device manufacturer must implement hardware-based security for IoT devices following NIST guidelines. Which component provides an immutable, unclonable device identity that serves as the foundation for the security architecture? (Select one!)
2. A smart building implements Bluetooth mesh networking for hundreds of lighting fixtures and sensors. The network uses a managed flooding approach where messages are relayed by all nodes. Which three Bluetooth Low Energy advertising channels does Bluetooth mesh use for message distribution? (Select three!)
Select all that apply3. An IoT device manufacturer implements Device Twins in their cloud-based IoT platform to manage thousands of distributed field devices. Each Device Twin maintains metadata, desired configuration states, and reported device states. Which three components are part of the Device Twin data structure? (Select three!)
Select all that apply4. A smart agriculture deployment uses analog and digital sensors connected to an Arduino microcontroller. The system includes a soil moisture sensor producing 0-5V analog signals and a rain detection sensor providing binary HIGH/LOW digital signals. Which component is required to interface the analog soil moisture sensor with the Arduino? (Select one!)
5. A logistics company implements RFID tags for asset tracking in their warehouse. The RFID system uses tags that harvest energy from the reader's radio frequency signal and do not require batteries. What type of RFID tags are being used? (Select one!)
All exams included • Cancel anytime