IoT and OT Security CCT Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A global food and beverage company is implementing OT security across its plants. The company must comply with both NIST and IEC 62443 frameworks. The security team is developing a risk management plan. What is the best approach to reconcile the two frameworks?

   • ACreate a separate risk management plan for each framework
   • BImplement IEC 62443 controls only, as they are the international standard for OT
   • CImplement NIST controls only, as they are more comprehensive and cover OT as well
   • DUse IEC 62443 as the primary framework for OT-specific controls and map NIST controls to it to satisfy broader enterprise requirements
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which IoT security best practice ensures that a device only runs software that has been cryptographically verified to be authentic and unmodified?

   • ANetwork segmentation
   • BEncryption
   • CSecure boot
   • DRegular updates
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which risk mitigation strategy involves implementing security controls to reduce the likelihood or impact of a risk?

   • ARisk acceptance
   • BRisk avoidance
   • CRisk reduction
   • DRisk transfer
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A regional electricity distributor is modernizing its OT network. The existing substation controllers are 15 years old, run a proprietary OS, and cannot be patched. The company must maintain 99.99% availability and cannot tolerate unplanned downtime. The security team proposes deploying an active vulnerability scanner to identify weaknesses. What is the best course of action?

   • ADeploy the scanner in a passive monitoring mode that analyzes network traffic without sending packets to the controllers
   • BRun the active scanner only during scheduled maintenance windows
   • CUse the active scanner but limit it to a single subnet to reduce impact
   • DReplace all legacy controllers with modern ones that support secure protocols
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A medical device manufacturer is designing a new internet-connected insulin pump. The pump has a small battery, limited memory, and must be safe and secure. The design team is debating whether to include a hardware cryptographic module or rely on software-based encryption. The pump will receive firmware updates over the internet. What is the most important security consideration in this decision?

   • AHardware cryptographic modules provide faster and more secure key storage, which is critical for protecting the firmware signing keys and patient data
   • BSoftware-based encryption is sufficient and reduces cost, so the hardware module is unnecessary
   • CThe pump should not support firmware updates to reduce the attack surface
   • DThe pump should use a proprietary encryption algorithm to prevent reverse engineering
   Reveal Solution Discussion Select an answer first