CyberCertPrepOT Security FundamentalsOT Fundamentals: Security Standards OverviewHARDFree question
A controller carries a 4-2 capability rating of SL-C 2 but the integrator's zone has SL-T 3. Which statement describes the correct outcome for the design?
- A.The target drops to the weakest component rating without review
- B.The vendor must reissue its 4-2 certificate at the higher level
- C.System design adds countermeasures until the zone reaches its target
- D.The component rating upgrades itself to match the zone target
Why C is correct
Component capability is an input rather than a result. The integrator closes the gap with compensating countermeasures such as segmentation or monitoring so the zone achieves SL-A equal to SL-T. Ratings do not change on their own and targets are not lowered silently.
Know someone studying for OT Security Fundamentals? Send them this one.