CyberCertPrepOT Security FundamentalsOT Fundamentals: Securing Industrial Control SystemsEASYFree question
The engineers state that the controller network never talks to the internet. Which detection result follows directly from that expectation?
- A.An outbound session from a PLC subnet to an external address
- B.A scheduled historian replication to the DMZ server
- C.A routine HMI poll of a local PLC once a second
- D.An NTP exchange with the internal grandmaster clock
Why A is correct
A baseline built on the statement that controllers stay internal makes any session toward an external address a deviation. Replication to the DMZ, local polling and internal time sync are normal for the design.
Know someone studying for OT Security Fundamentals? Send them this one.