CyberCertPrepOT Security FundamentalsOT Fundamentals: Network Architecture & ProtocolsEASYFree question
Modbus TCP is widely deployed in OT networks. Which characteristic makes it a significant security concern by default?
- A.It listens on TCP port 502 and provides no built-in authentication, integrity, or encryption
- B.It runs over UDP and cannot be firewalled
- C.It encrypts payloads with weak DES keys that are easily cracked on all Modbus function codes
- D.It requires a client certificate that is rarely rotated, a guarantee that holds across every firmware revision still in service
Why A is correct
Modbus TCP uses TCP port 502 and, like the original serial Modbus, has no authentication, integrity checking, or encryption. Any host that can reach the port can read or write coils and registers, so protection relies on segmentation, conduit firewalls, and monitoring rather than the protocol itself.
Know someone studying for OT Security Fundamentals? Send them this one.