CyberCertPrepOT Security FundamentalsOT Fundamentals: Incident Response & ForensicsHARDFree question
A power generation plant tests its plan with a scenario where the turbine HMI is encrypted while the unit runs at full load. Which sequence reflects OT response priorities?
- A.Notify the regulator first then decide on the load
- B.Confirm panel control then investigate then restore
- C.Image the HMI disk first then ask operators to hold load
- D.Restore the HMI from backup first then test protection
Why B is correct
The first duty is a safe stable unit, using local panels or manual control while the HMI is lost. Investigation follows. Restoring blindly or imaging first delays the safety confirmation, and notification runs in parallel rather than first.
Know someone studying for OT Security Fundamentals? Send them this one.