CyberCertPrepOT Security FundamentalsOT Fundamentals: ICS/SCADA BasicsMEDIUMFree question
A single-loop controller on a lab furnace has an undocumented RS-485 Modbus port. Why does this device matter for an asset inventory?
- A.Standalone loop devices sit outside the control system scope
- B.It holds a network interface that can accept commands
- C.It has no firmware that a remote user could change
- D.Its serial port blocks any engineering changes
Why B is correct
Even a small controller with a serial communication port can be read or written by anything on that bus. Undocumented interfaces are exactly what an inventory exists to find. Loop devices contain firmware and are in scope.
Know someone studying for OT Security Fundamentals? Send them this one.