A manufacturing plant has both an IT network (for HR and finance) and an OT network (for PLCs controlling robotic arms). The plant recently suffered a ransomware attack that started in the IT network and spread to the OT network, halting production. The security team wants to implement monitoring to detect similar cross-network movement early, but the OT network cannot tolerate traditional endpoint agents due to latency and availability constraints. Which monitoring approach is most appropriate for the OT network?

Place an inline next-generation firewall between every PLC and its controller

Deploy host-based intrusion detection agents on every PLC and robotic controller

Rely solely on IT network logs and assume OT is isolated

Implement passive network monitoring using SPAN ports or network taps to analyze OT traffic without inline disruption

Information Systems Security Architecture Professional

Domain 3Objective 1

3.1 Identify Infrastructure and System Security Requirements ISSAP Practice Questions (Page 7)

Part of the Infrastructure and System Security Architecture domain, which accounts for 32% of the ISSAP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~22–38 in this domain), expect 7–13 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

6concepts

32%of the exam

Questions 31–31

31expert · hard
A manufacturing plant has both an IT network (for HR and finance) and an OT network (for PLCs controlling robotic arms). The plant recently suffered a ransomware attack that started in the IT network and spread to the OT network, halting production. The security team wants to implement monitoring to detect similar cross-network movement early, but the OT network cannot tolerate traditional endpoint agents due to latency and availability constraints. Which monitoring approach is most appropriate for the OT network?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to ISSAP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSAP” is a trademark of its owner, used for identification only.

3.1 Identify Infrastructure and System Security Requirements ISSAP Practice Questions (Page 7)

Questions 31–31

Keep studying — Infrastructure and System Security Architecture