ISACA · IoT-Fund
IoT Fundamentals Certificate Practice Tests
ISACA IoT Fundamentals practice covering IoT concepts and IoT-enabled technologies for the mixed knowledge and virtual-lab exam.
Exam Details
Practice Questions
630
≈ 4 practice exams
Duration
120 minutes
Passing Score
65%
Difficulty
FoundationalLast Updated
Oct 2026
Topics Covered
IoT Concepts (47%)IoT-Enabled Technologies (53%)
ISACA IoT Fundamentals Certificate Practice Exam
ISACA IoT Fundamentals validates basic IoT concepts and the technologies used to build IoT solutions. The official blueprint has two domains: IoT Concepts at 47% and IoT-Enabled Technologies at 53%, covering how devices, connectivity, operating systems, applications, and enabling components work together.
The remote-proctored exam lasts two hours and awards 60 total points: 50 multiple-choice questions worth one point each plus five performance-based questions worth two points each. The passing score is 65%, there are no prerequisites, and the listed price is $120 for ISACA members or $144 for nonmembers.
A question bank can cover the knowledge portion, but it cannot replace the virtual-lab component. Use these 630 questions to find conceptual gaps, then practise the official lab themes such as microcontrollers, middleware, and emulation before booking; purchased eligibility is valid for 365 days.
Exam Domain Breakdown
IoT Concepts47%
IoT-Enabled Technologies53%
Exam Overview
ISACA IoT Fundamentals is an entry-level certificate for understanding IoT concepts, principles, and enabling technologies. The exam combines knowledge questions with performance tasks in a virtual lab, so preparation must include both conceptual study and practical familiarity with IoT components and environments.
Who Should Take This Exam
The certificate suits students, recent graduates, people entering or changing into IT, and practitioners who need a structured introduction to connected devices, sensors, actuators, computing, communications, operating systems, applications, and the security implications of IoT choices.
Prerequisites
ISACA lists no prerequisites. Candidates should still test their remote-proctoring setup before purchase because the exam includes a virtual-lab component and purchases are nonrefundable and nontransferable.
Exam Format
The two-hour, English, remote-proctored exam is worth 60 points: 50 multiple-choice questions at one point each and five performance-based questions at two points each. The passing score is 65%. The candidate guide lists $120 for members and $144 for nonmembers, with 365 days to take the exam after purchase.
Skills Measured
- 1.IoT Concepts (47%): foundational principles, characteristics, models, use cases, components, risks, and security considerations.
- 2.IoT-Enabled Technologies (53%): devices, sensors, actuators, communications, operating systems, applications, middleware, microcontrollers, and emulation.
Study Tips
- Study both domains in proportion to their 47% and 53% weights.
- Use the official lab package or an equivalent environment for middleware, emulation, and microcontroller tasks.
- Practise translating a use case into devices, connectivity, processing, storage, and security requirements.
- Do not prepare only for multiple choice because five performance tasks contribute one-sixth of the available points.
- Run the official compatibility check before buying or scheduling the remote exam.
Career Benefits
The certificate demonstrates foundational IoT literacy rather than advanced engineering mastery. It can support entry into IoT study or junior technology work and gives candidates a base for deeper networking, cloud, embedded-systems, data, or cybersecurity learning.
Sample Questions
5 sample questions with answers and explanations. The full bank has 630 questions, enough for 4 full-length practice exams.
Preview — answers shown1. A developer programs an Arduino microcontroller to read analog soil moisture sensor values and publish them via MQTT. What file extension does the Arduino IDE use for sketch files? (Select one!)
A.arduino
B.sketch
C.ino
D.ard
Explanation
The Arduino IDE uses the .ino file extension for Arduino sketch files, which contain C/C++ code for programming Arduino microcontrollers. This extension comes from the original Arduino board name. The other extensions are not used by Arduino IDE. Understanding microcontroller development environments is part of the IoT Fundamentals performance-based lab component.
2. An industrial control system sends a CoAP request to a remote sensor but needs confirmation that the message was received. Which CoAP message type should be used? (Select one!)
AACK (Acknowledgement)
BRST (Reset)
CNON (Non-confirmable)
DCON (Confirmable)
Explanation
CON (Confirmable) is correct because confirmable messages require acknowledgment and are automatically retransmitted using exponential back-off until an ACK or RST is received, ensuring the request reaches the sensor. NON (Non-confirmable) messages are fire-and-forget without acknowledgment, providing no delivery confirmation. ACK (Acknowledgement) is a response to confirmable messages, not a request type. RST (Reset) indicates the receiver cannot process a message due to lost context, typically after system reboots, and is not used for requests requiring confirmation.
3. A university develops IoT prototypes using Arduino microcontrollers. Students write code for temperature sensors and actuators. What file extension does the Arduino IDE use for sketch files containing IoT device code? (Select one!)
A.cpp
B.sketch
C.ino
D.ard
Explanation
Arduino IDE uses the .ino file extension for sketch files, which are the source code files containing the setup and loop functions that define Arduino program behavior. This is the standard extension recognized by the Arduino development environment. While Arduino sketches are based on C/C++ and compile to .cpp files internally, the source files developers write use .ino extension. The .ard and .sketch extensions are not used by Arduino IDE. Understanding Arduino file conventions is essential for IoT development with microcontrollers covered in the ISACA IoT Fundamentals exam performance-based labs.
4. An enterprise implements MQTT packet identifiers for QoS 1 and QoS 2 message flows. What is the maximum number of packet identifiers available per client-broker connection? (Select one!)
A1024 identifiers
B256 identifiers
CUnlimited identifiers
D65535 identifiers
Explanation
MQTT uses 16-bit packet identifiers, providing a maximum of 65535 unique identifiers per client-broker connection. Packet identifiers are used for QoS 1 and QoS 2 message flows to match PUBLISH messages with their corresponding acknowledgments. Once a message flow completes, the packet identifier becomes reusable. This limit accommodates practical message volumes for typical IoT deployments. Identifiers are unique per client-broker interaction, not globally across all clients.
5. A security audit reveals IoT devices shipped with username admin and password admin123. Which OWASP IoT Top 10 vulnerability does this represent? (Select one!)
AWeak, Guessable, or Hardcoded Passwords
BLack of Device Management
CInsecure Default Settings
DInsecure Network Services
Explanation
Weak, Guessable, or Hardcoded Passwords is the OWASP IoT Top 10 vulnerability that specifically addresses default credentials, hardcoded passwords in firmware, and easily guessable passwords. This is the number one IoT vulnerability. Insecure Default Settings covers broader configuration issues beyond just passwords. Insecure Network Services relates to unencrypted protocols and open ports. Lack of Device Management addresses the absence of inventory and monitoring capabilities.
Frequently Asked Questions
What is the ISACA IoT Fundamentals exam format?
It awards 60 points through 50 multiple-choice questions worth one point each and five performance-based questions worth two points each.
How long is the IoT Fundamentals exam?
The remotely proctored exam allows 120 minutes.
What score passes ISACA IoT Fundamentals?
ISACA requires 65% or higher.
What are the IoT Fundamentals domain weights?
IoT Concepts is 47% and IoT-Enabled Technologies is 53%.
Does IoT Fundamentals have prerequisites?
No. ISACA states that there are no prerequisites.
How much does the IoT Fundamentals exam cost?
The official candidate guide lists $120 for ISACA members and $144 for nonmembers. Purchases are nonrefundable and nontransferable.
More ISACA Practice Exams
Data Science Fundamentals Certificate
DataSci-Fund · 591 questions
Digital Trust Ecosystem Framework Foundation Certificate
Digital-Trust · 600 questions
Information Technology Certified Associate (ITCA)
ITCA · 596 questions
IT Audit Fundamentals Certificate
IT-Audit-Fund · 627 questions
IT Risk Fundamentals Certificate
Risk-Fund · 616 questions
ISACA Advanced in AI Audit (AAIA)
AAIA · 600 questions
$17.99
One-time access to this exam
630 questions (4 practice exams' worth)
Unlimited timed exam simulations
Yours forever — no subscription
Detailed explanations
Free preview stays available