CyberCertPrepOT Security FundamentalsOT Fundamentals: Network Architecture & ProtocolsEASYFree question
Scenario
An OT engineer is mapping plant systems onto the Purdue model. A historian server that aggregates production data and exposes it to corporate reporting tools is being placed.
Where does this server most appropriately belong?
- A.The Level 3.5 industrial DMZ between the control network and enterprise network
- B.Level 4 directly inside the corporate business LAN, which pushes process data outward with no pathway back into the control zone
- C.Level 0, alongside field sensors and actuators
- D.Level 1, on the same segment as the PLCs it polls, which lets responders image a running PLC the same way they image a laptop
Why A is correct
A historian that bridges OT data to IT consumers is a classic broker that belongs in the Level 3.5 DMZ, so neither network connects directly to the other. Placing it in the DMZ lets enterprise tools pull data without ever traversing into the control zone.
Know someone studying for OT Security Fundamentals? Send them this one.