CyberCertPrepOT Security FundamentalsOT Fundamentals: Threat Landscape & Attack VectorsHARDFree question
Stuxnet altered centrifuge drive frequencies while operators saw normal readings. Which characteristic made this hard to notice from the HMI?
- A.The HMI was switched off during the whole attack window
- B.Recorded normal sensor values were replayed to the display
- C.Drive commands were encrypted with plant keys
- D.Alarms were routed to the vendor via satellite
Why B is correct
The malware replayed previously recorded normal values to the operator view while the process was being driven abnormally, a manipulation of view that defeats trust in HMI data. The HMI stayed running, and there was no alarm rerouting or command encryption.
Know someone studying for OT Security Fundamentals? Send them this one.