CyberCertPrepOT Security FundamentalsOT Fundamentals: Threat Landscape & Attack VectorsMEDIUMFree question
Stuxnet reached centrifuge controllers in a facility that had no direct internet link. What did this teach defenders about an air gap?
- A.Long passwords on engineering accounts make a gap sufficient
- B.An isolated network is safe once antivirus is installed
- C.Portable media or laptops can bridge an isolated network
- D.Wireless links are the sole route into isolated plants
Why C is correct
Stuxnet crossed the gap on infected removable media and contractor machines, so isolation without control of what enters the network is not a defense. Long passwords, antivirus alone, or a single wireless route do not describe what happened.
Know someone studying for OT Security Fundamentals? Send them this one.