CyberCertPrepOT Security FundamentalsOT Fundamentals: Threat Landscape & Attack VectorsMEDIUMFree question
During an attack the adversary disables the alarm annunciation path and blocks reporting messages from field devices so operators miss the event. Which tactic is this?
- A.Impair Process Control
- B.Lateral Movement tactic
- C.Inhibit Response Function
- D.Privilege Escalation
Why C is correct
Blocking alarms and reporting messages stops the plant from responding to a developing event, which is Inhibit Response Function. Impair Process Control changes the process itself, and the other two tactics describe entry and reconnaissance.
Know someone studying for OT Security Fundamentals? Send them this one.