IoT and OT Security CCT Practice Questions (Page 10)

Questions 46–50

1. 46application · medium

   A chemical plant uses a Purdue model architecture. The IT network (Level 4) was compromised, and the security team wants to prevent the attack from reaching the control systems (Level 2). Which control is most effective at this boundary?

   • AInstall antivirus on all Level 2 HMIs
   • BDeploy a firewall between Level 4 and Level 3 with strict allowlisting of protocols and IPs
   • CEnable encryption on all Level 2 communications
   • DDisconnect the Level 2 network from Level 3
   Reveal Solution Discussion Select an answer first
2. 47foundation · easy

   Which IoT protocol is based on the REST architectural style and uses UDP, making it suitable for resource-constrained devices?

   • ABluetooth
   • BMQTT
   • CCoAP
   • DZigbee
   Reveal Solution Discussion Select an answer first
4. 48expert · hard

   A manufacturing plant uses a mix of legacy Modbus devices and newer OPC UA devices on the same OT network. The plant is implementing a security program and needs to improve visibility and control. The security team is considering deploying an industrial firewall with deep packet inspection (DPI). What is the primary challenge they will face?

   • AThe firewall will require a separate management interface for each protocol
   • BThe firewall will not be able to see encrypted OPC UA traffic, so it will only protect Modbus
   • CThe firewall must be able to parse and enforce policies for both Modbus and OPC UA, which have very different security models and data structures
   • DThe firewall will introduce latency that could disrupt time-sensitive control loops
   Reveal Solution Discussion Select an answer first
5. 49foundation · easy

   Which OT security best practice involves continuously observing network traffic and system logs to detect suspicious activity?

   • AAccess control
   • BNetwork segmentation
   • CPatch management
   • DMonitoring
   Reveal Solution Discussion Select an answer first
6. 50application · medium

   A smart home device manufacturer wants to improve the security of its devices. The devices currently use a simple password for authentication and do not support secure boot. The manufacturer wants to implement a cost-effective measure that significantly reduces the risk of unauthorized access to the devices. Which measure should they prioritize?

   • AEncrypt all network traffic with TLS
   • BDisable the web interface on the device
   • CImplement secure boot to ensure only signed firmware runs
   • DUse a longer password for the admin account
   Reveal Solution Discussion Select an answer first