CyberCertPrepOT Security FundamentalsOT Fundamentals: Securing Industrial Control SystemsEASYFree question
A controller offers an FTP service used only during initial commissioning to load files. After go-live, the recommended hardening step is to:
- A.Disable the FTP service since it is no longer needed for normal operation
- B.Keep FTP running and rely on a strong password
- C.Switch FTP to anonymous mode for convenience
- D.Forward the FTP port through the firewall to the corporate network
Why A is correct
Services that were only needed for commissioning should be turned off afterward to minimize the running attack surface. Disabling the FTP service removes a cleartext, frequently abused protocol that serves no purpose during normal operation.
Know someone studying for OT Security Fundamentals? Send them this one.