CyberCertPrepOT Security FundamentalsOT Fundamentals: Incident Response & ForensicsMEDIUMFree question
A gas plant historian shows a flow valve at 100 percent for ten minutes while the operator screen shows 40 percent. What should the analyst treat this mismatch as?
- A.Possible spoofing of the displayed value
- B.Normal valve behavior while a calibration runs
- C.Proof that the historian database is corrupt
- D.A sign that NTP is set to the wrong zone
Why A is correct
Disagreement between the control data path and the display can mean spoofed readings or manipulated logic, which is exactly the loss of view pattern. It must be investigated against field evidence before accepting a benign cause.
Know someone studying for OT Security Fundamentals? Send them this one.