2.7 Identify and Describe Cybersecurity Concerns Unique to Operation Technology (OT) and Internet of Things (IoT) Devices CYBERSECURITY-PRACTITIONER Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which statement best describes a fundamental difference between Operational Technology (OT) and Information Technology (IT) environments?

   • AOT prioritizes data confidentiality, while IT prioritizes system availability.
   • BOT prioritizes system availability and safety, while IT often prioritizes data confidentiality and integrity.
   • COT environments are always isolated from IT networks, while IT networks are always connected to the internet.
   • DOT uses only proprietary protocols, while IT uses only standard Ethernet and IP.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which of the following is a typical characteristic of protocols used in Operational Technology (OT) environments?

   • AThey are designed with strong built-in encryption and authentication by default.
   • BThey are all based on modern TCP/IP standards and are easily updated.
   • CThey are designed to maximize data throughput for large file transfers.
   • DThey are primarily focused on real-time control and deterministic behavior.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which of the following is an example of a mitigation strategy for OT and IoT security?

   • ADisabling all logging on OT and IoT devices to improve performance.
   • BUsing default passwords on IoT devices to ensure compatibility.
   • CConnecting OT and IoT devices directly to the internet for easier remote access.
   • DImplementing continuous monitoring of OT and IoT network traffic for anomalies.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which of the following is a defining characteristic of many IoT devices?

   • AThey are typically resource-constrained with limited processing power and memory.
   • BThey always use a single standardized protocol for communication.
   • CThey are designed to operate for decades without any software updates.
   • DThey have abundant computing resources and can run full security suites.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A manufacturing plant's IT team wants to apply the same patch-management policy used for office workstations to the programmable logic controllers (PLCs) on the production floor. The OT team objects. Which concern is the most critical reason the OT team's objection is valid?

   • AApplying patches without testing can interrupt continuous production processes and cause safety risks.
   • BIT patch-management software is not licensed for use on OT networks.
   • CPLCs run proprietary operating systems that cannot be patched with standard IT tools.
   • DPLCs do not require patches because they are air-gapped from the internet.
   Reveal Solution Discussion Select an answer first