CyberCertPrepOT Security FundamentalsOT Fundamentals: Securing Industrial Control SystemsMEDIUMFree question
A utility wants lossless capture on a critical uplink with no chance that mirroring load affects forwarding. Which collection method fits best?
- A.A passive hardware network TAP on the uplink
- B.A router NetFlow export set to one-minute intervals
- C.A SPAN session mirroring several VLANs to one port
- D.An inline firewall placed in learning mode
Why A is correct
A hardware TAP copies the signal in the cable itself, does not depend on switch CPU, and drops no frames under load. SPAN can drop packets when oversubscribed, and inline or flow-based tools either sit in the data path or lose packet detail.
Know someone studying for OT Security Fundamentals? Send them this one.