IoT and OT Security CCT Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A manufacturing plant deploys hundreds of wireless temperature sensors that send readings every 30 seconds to a central gateway. The sensors have limited battery life and CPU power, and the plant network is isolated from the internet. The security team wants to ensure that sensor data cannot be easily intercepted or altered while keeping the sensors' power consumption low. Which protocol and security measure best meets these requirements?

   • AUse Zigbee with no encryption to save power
   • BUse CoAP with DTLS and pre-shared keys
   • CUse Modbus over TCP with application-layer encryption
   • DUse MQTT with TLS and client certificates on each sensor
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which threat to OT systems involves an attacker gaining entry to a facility to directly manipulate or damage control equipment?

   • AMalware
   • BMan-in-the-middle
   • CPhysical attacks
   • DPhishing
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A hospital deploys thousands of IoT medical devices, including infusion pumps and patient monitors. The devices are heterogeneous, have outdated firmware, and cannot be patched frequently. The security team needs to reduce the risk of these devices being used as a pivot point in the network. Which strategy is most effective?

   • APlace all IoT devices on a separate VLAN with strict firewall rules and monitor traffic
   • BReplace all devices with newer models that support automatic updates
   • CDisable all network connectivity on the devices
   • DUse a single shared password for all devices to simplify management
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Which OT security challenge is particularly critical because disruptions to industrial processes can cause physical harm or environmental damage?

   • ALack of skilled personnel
   • BLegacy systems
   • CAvailability requirements
   • DSafety-critical nature
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A smart building operator installs internet-connected HVAC controllers from a new vendor. A security review finds that the controllers have a default admin password, an unencrypted firmware update mechanism, and a debug UART port exposed on the circuit board. Which mitigation addresses the most critical risk first?

   • AImplement a firmware signing process with the vendor
   • BChange the default admin password on every controller
   • CIsolate the HVAC network from the corporate network
   • DDisable the debug UART port on each device
   Reveal Solution Discussion Select an answer first