2.7 Identify and Describe Cybersecurity Concerns Unique to Operation Technology (OT) and Internet of Things (IoT) Devices CYBERSECURITY-PRACTITIONER Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is a common security challenge in IoT environments?

   • AIoT devices are typically isolated on their own network segment.
   • BIoT devices are always patched regularly by the manufacturer.
   • CIoT devices are typically managed by a central IT team with full visibility.
   • DIoT devices often have limited visibility and are not easily monitored by traditional security tools.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A water utility uses a SCADA system to control pumps and valves. A security analyst notices unusual outbound traffic from the SCADA network to an external IP address. Which type of attack is most likely occurring?

   • AA denial-of-service attack flooding the SCADA network
   • BA man-in-the-middle attack intercepting SCADA communications
   • CA command-and-control (C2) communication from a compromised device
   • DA ransomware attack encrypting the SCADA database
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is a potential impact of a security breach in an OT environment that is not typically seen in a pure IT data breach?

   • AReputation damage to the organization
   • BPhysical damage to equipment or harm to human safety
   • CFinancial loss due to regulatory fines
   • DLoss of confidential customer data
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which of the following is a general mitigation strategy for securing OT and IoT environments?

   • AUsing the same security policies for OT, IoT, and IT devices.
   • BDisabling all network connectivity to OT and IoT devices.
   • CRelying solely on antivirus software installed on each device.
   • DNetwork segmentation to isolate OT and IoT devices from the corporate IT network.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is a primary reason why OT systems like ICS and SCADA are attractive targets for cyberattacks?

   • AThey are the only systems that store sensitive personal data.
   • BThey are always connected to the internet for remote monitoring.
   • CThey often run on legacy operating systems with unpatched vulnerabilities.
   • DThey are typically connected directly to the public internet without any firewall.
   Reveal Solution Discussion Select an answer first