CyberCertPrepOT Security FundamentalsOT Fundamentals: Threat Landscape & Attack VectorsEASYFree question
A contractor who built a pumping station's SCADA configuration is dismissed and later issues commands to it from a laptop over radio. Which threat category is this?
- A.Insider with legitimate knowledge of the system
- B.Competitor stealing trade secrets from remote sites
- C.Supply chain implant in vendor firmware
- D.Opportunistic scanner sweeping the open internet
Why A is correct
A current or former trusted party who knows the system and its access paths is an insider threat, as in the Maroochy Shire case. Internet scanners lack that knowledge, a firmware implant is a supply chain issue, and the scenario shows no theft of secrets.
Know someone studying for OT Security Fundamentals? Send them this one.