CyberCertPrepOT Security FundamentalsOT Fundamentals: Threat Landscape & Attack VectorsEASYFree question
At the Oldsmar, Florida water treatment facility in 2021, the intruder attempted to harm the public by:
- A.Deleting the historian database to erase water-quality records
- B.Cutting power to the chlorination pumps using a physical attack
- C.Triggering ransomware that locked out the treatment SCADA system
- D.Raising the sodium hydroxide (lye) dosing setpoint to a dangerous level via a remote-access session
Why D is correct
The attacker connected through remote-access software (TeamViewer) and briefly increased the sodium hydroxide setpoint from about 100 ppm to 11,100 ppm. An operator noticed the cursor moving and reverted the change, but the event highlighted weak remote-access controls in small water utilities.
Know someone studying for OT Security Fundamentals? Send them this one.