CyberCertPrepOT Security FundamentalsOT Fundamentals: Securing Industrial Control SystemsEASYFree question
An operator wants to copy a configuration file from a USB stick directly into an HMI on the production floor. What practice best balances usability with malware-introduction risk?
- A.Route all removable media through a dedicated scanning kiosk that sanitizes and validates files before they are transferred to control hosts on controlled media
- B.Allow any USB device on HMIs as long as it is reformatted first at the HMI because a full low-level format removes firmware-resident payloads as well every time
- C.Disable antivirus on the HMI so the file copy is not delayed and re-enable it immediately after, a step that keeps the AV screening window narrow enough to help
- D.Permit personal USB drives but require operators to sign a usage logbook, an advantage that grows stronger as the installed base ages and needs no controls to maintain
Why A is correct
Removable media is a leading malware vector into air-gapped or segmented OT networks. A media-sanitization kiosk scans and validates content before it reaches control hosts, while uncontrolled or personal USB use bypasses that defense entirely.
Know someone studying for OT Security Fundamentals? Send them this one.