CyberCertPrepOT Security FundamentalsOT Fundamentals: Securing Industrial Control SystemsEASYFree question
A new RTU supports disabling its diagnostic web interface, its built-in Wi-Fi, and an unused serial console. Following the hardening principle of least functionality, the engineer should:
- A.Keep Wi-Fi enabled for convenient field laptop access
- B.Leave the diagnostic web interface on but change its default port
- C.Disable only the serial console and leave the others as shipped
- D.Disable all three interfaces because none are required for the RTU's operational role
Why D is correct
Least functionality directs that every interface not needed for operation be turned off. With the diagnostic web page, Wi-Fi, and serial console all unused, disabling all three removes multiple independent attack surfaces from the device.
Know someone studying for OT Security Fundamentals? Send them this one.