CyberCertPrepOT Security FundamentalsOT Fundamentals: Incident Response & ForensicsHARDFree question
A plant plan was copied from an IT template and states that every incident starts with immediate network disconnection of the affected asset. Which weakness does a review of an OT scenario expose first?
- A.Disconnection can drop the view or control a process needs
- B.Disconnection destroys volatile evidence on the switch
- C.Disconnection triggers a mandatory regulator report
- D.Disconnection resets the PLC program to factory state
Why A is correct
In OT a networked asset may be a live controller or a data source for safety interlocks, so reflexive disconnection can cause a trip or blind operators. Evidence loss, reporting and contracts are secondary concerns.
Know someone studying for OT Security Fundamentals? Send them this one.