After 30 days a passive sensor on three switches reports a stable count of 140 assets, yet twelve cabinets hold unmanaged switches. Which conclusion is most defensible?
- A.A stable count over thirty days shows the inventory is complete
- B.The figure covers monitored segments rather than the plant
- C.Devices silent for thirty days are decommissioned
- D.Unmanaged switches are invisible to physical audit
Why B is correct
Visibility ends where sensors are placed, so a flat count only proves stability inside that coverage. Quiet or unmonitored devices need span coverage or a walk-down before anyone calls the inventory complete.
Know someone studying for OT Security Fundamentals? Send them this one.