CyberCertPrepOT Security FundamentalsOT Fundamentals: Incident Response & ForensicsMEDIUMFree question
After a malware event at a bottling plant the owner asks why process engineers sit on the response team. Which reason is the strongest?
- A.They approve the firewall rule changes in IT
- B.They hold the legal duty to notify the sector regulator
- C.They judge if a response step will upset the process
- D.They run the forensic imaging of the file servers
Why C is correct
Engineers understand the physical consequences of isolating a host or stopping a service. Regulator notification sits with compliance or legal staff, forensic imaging with trained analysts, and firewall approval with the network owners.
Know someone studying for OT Security Fundamentals? Send them this one.