CyberCertPrepOT Security FundamentalsOT Fundamentals: Securing Industrial Control SystemsMEDIUMFree question
Maintenance planners need the date after which the vendor stops issuing security fixes for a controller family. Which source is authoritative?
- A.The product supplier lifecycle notice for that model
- B.The MAC address vendor prefix seen on the wire
- C.The banner text returned by the Modbus listener
- D.The CVSS base score of the newest advisory
Why A is correct
Only the supplier decides when a model leaves support and normally publishes it in a lifecycle or end-of-sale notice. Advisory scores, MAC prefixes and banners say nothing about future support commitments.
Know someone studying for OT Security Fundamentals? Send them this one.