CyberCertPrepOT Security FundamentalsOT Fundamentals: Securing Industrial Control SystemsEASYFree question
An OT site enforces MFA on its remote-access broker. An auditor asks why MFA matters more here than a longer password policy alone. The strongest justification is:
- A.MFA removes the need to record remote sessions
- B.MFA encrypts the control protocols traversing the VPN
- C.MFA defeats credential reuse and phishing that frequently precede OT intrusions, since a stolen password alone no longer grants access
- D.MFA automatically patches the broker against new vulnerabilities
Why C is correct
Remote access is a prime initial-access vector, and stolen or phished credentials are a common entry technique. MFA ensures a captured password is insufficient by itself, which password length alone cannot guarantee against credential theft.
Know someone studying for OT Security Fundamentals? Send them this one.