IoT and OT Attacks and Countermeasures EHE Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   A manufacturing company's OT network uses a legacy protocol that is unencrypted and lacks authentication. The company wants to implement security monitoring but the OT network is highly sensitive to latency and downtime. Which approach is most appropriate?

   • ADeploy an inline intrusion prevention system that blocks malicious traffic.
   • BDeploy passive monitoring taps that do not introduce latency and use an OT-specific intrusion detection system.
   • CReplace the legacy protocol with a modern encrypted protocol.
   • DDisable the legacy protocol and use a VPN for all communications.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A power utility's OT environment runs on Windows 7-based HMIs that are no longer patched. The network team has limited visibility into the OT network because it uses a mix of legacy protocols. A recent spear-phishing email was detected in the corporate environment. What is the most immediate risk to the OT environment?

   • AAn attacker could use the unpatched HMIs as a foothold to move laterally into the OT network.
   • BThe spear-phishing email will directly infect the PLCs through the corporate network.
   • CThe lack of visibility only affects compliance reporting, not security.
   • DThe legacy protocols will automatically encrypt all traffic, preventing interception.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Which of the following is a legacy protocol commonly found in OT environments that is often insecure due to lack of authentication and encryption?

   • AModbus
   • BHTTP
   • CSSH
   • DDNS
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A hospital's building management system (BMS) controls HVAC and access doors. The BMS is connected to the hospital's IT network for remote monitoring. The hospital has experienced a ransomware attack that encrypted the BMS servers, causing doors to lock and HVAC to fail. The hospital wants to improve resilience against future ransomware attacks. Which combination of controls is most effective?

   • ADisconnect the BMS from the IT network and rely on manual monitoring
   • BPurchase cyber insurance and increase the ransom budget
   • CDeploy an endpoint protection solution on all BMS servers
   • DSegment the BMS network from the IT network and implement offline backups
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Which OT vulnerability is most associated with the use of plaintext protocols like Telnet and FTP in industrial networks?

   • ALack of visibility
   • BUnpatched systems
   • CWeak authentication
   • DInsecure protocols
   Reveal Solution Discussion Select an answer first