CyberCertPrepOT Security FundamentalsOT Fundamentals: Securing Industrial Control SystemsEASYFree question
A controller offers an FTP service used only during initial commissioning to load files. After go-live, the recommended hardening step is to:
- A.Forward the FTP port through the firewall to the corporate network
- B.Keep FTP running and rely on a strong password, since password complexity rules stop credential replay against legacy protocols
- C.Switch FTP to anonymous mode for convenience after commissioning wraps up
- D.Disable the FTP service since it is no longer needed for normal operation
Why D is correct
Services that were only needed for commissioning should be turned off afterward to minimize the running attack surface. Disabling the FTP service removes a cleartext, frequently abused protocol that serves no purpose during normal operation.
Know someone studying for OT Security Fundamentals? Send them this one.