CyberCertPrepOT Security FundamentalsOT Fundamentals: Securing Industrial Control SystemsEASYFree question
Where should a network IDS sensor connect to observe traffic crossing between Level 3 and Level 2?
- A.On the corporate guest wireless access point
- B.Beside the internet router at the headquarters office
- C.Inside each PLC cabinet at the sensor terminal block
- D.A mirror port on the switch linking the two zones
Why D is correct
A sensor sees only what is mirrored to it, so it belongs on the link that carries the zone-to-zone traffic of interest. The other locations carry unrelated traffic.
Know someone studying for OT Security Fundamentals? Send them this one.