A pipeline company uses OPC UA for communication between its control center and remote pumping stations. The security team wants to ensure that only authorized clients can read and write to the OPC UA server. Which configuration is most appropriate?

Enable OPC UA security with application authentication and user authorization

Rely on IP address filtering only

Disable OPC UA security for performance

Use a shared secret key for all clients

A utility company uses DNP3 for communication between master stations and remote terminal units (RTUs). The security team wants to add authentication to DNP3 traffic. Which standard or feature should they implement?

Use a VPN between master and RTUs

DNP3 Secure Authentication (SAv5)

A hospital's OT network includes MRI machines and patient monitoring systems. The network is flat and uses legacy protocols. The security team wants to improve security but cannot afford downtime. They are considering a micro-segmentation project. Which factor is most critical to address before implementing micro-segmentation?

Hiring additional security staff

Upgrading all devices to support modern protocols

Understanding the communication flows between devices

EC-CouncilCertified Cybersecurity Technician

Domain 4Objective 4

IoT and OT Security CCT Practice Questions (Page 7)

Part of the Cloud, Wireless, Mobile, and IoT/OT Security domain, which makes up ~17% of our current practice bank.

51questions here

11free pages

12concepts

Questions 31–35

31application · medium
A pipeline company uses OPC UA for communication between its control center and remote pumping stations. The security team wants to ensure that only authorized clients can read and write to the OPC UA server. Which configuration is most appropriate?
Select an answer first
32application · medium
A utility company uses DNP3 for communication between master stations and remote terminal units (RTUs). The security team wants to add authentication to DNP3 traffic. Which standard or feature should they implement?
Select an answer first
33foundation · easy
Which OT security challenge is caused by the use of outdated hardware and software that may no longer receive security updates?
Select an answer first
34foundation · easy
Which organization publishes the NIST Cybersecurity Framework, which is often used to guide IoT and OT security practices?
Select an answer first
35expert · hard
A hospital's OT network includes MRI machines and patient monitoring systems. The network is flat and uses legacy protocols. The security team wants to improve security but cannot afford downtime. They are considering a micro-segmentation project. Which factor is most critical to address before implementing micro-segmentation?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCT” is a trademark of its owner, used for identification only.

IoT and OT Security CCT Practice Questions (Page 7)

Questions 31–35

A pipeline company uses OPC UA for communication between its control center and remote pumping stations. The security team wants to ensure that only authorized clients can read and write to the OPC UA server. Which configuration is most appropriate?

A utility company uses DNP3 for communication between master stations and remote terminal units (RTUs). The security team wants to add authentication to DNP3 traffic. Which standard or feature should they implement?

Which OT security challenge is caused by the use of outdated hardware and software that may no longer receive security updates?

Which organization publishes the NIST Cybersecurity Framework, which is often used to guide IoT and OT security practices?

Keep studying — Cloud, Wireless, Mobile, and IoT/OT Security