CyberCertPrepOT Security FundamentalsOT Fundamentals: Securing Industrial Control SystemsHARDFree question
Passive monitoring reports firmware 3.2 on a PLC while the inventory says 3.5 after an update ticket closed last month. What is the best next step?
- A.Overwrite the passive value then discard future wire data
- B.Trust the ticket then suppress further firmware alerts
- C.Run an active firmware query across the subnet immediately
- D.Reconcile against the controller diagnostics in a maintenance window
Why D is correct
A mismatch can mean the update never landed, was rolled back, or the sensor misparsed a banner, so it needs evidence from the device itself gathered safely when operations allow. Silencing alerts or sweeping the subnet either hides a real gap or risks the controllers.
Know someone studying for OT Security Fundamentals? Send them this one.