What is a common vulnerability in OT systems that can be exploited in cyber-physical attacks?

Question

Options

• AThe use of proprietary protocols
• BLack of real-time data analysis
• CInterconnectivity with IT networks
• DAbsence of physical security controls

• A
  7% (3)
• B
  2% (1)
• C
  81% (34)
• D
  10% (4)

Explanation

Interconnectivity with IT networks (C) is the primary vulnerability because OT systems - such as industrial control systems (ICS), SCADA, and PLCs - were originally designed as isolated, air-gapped environments. As organizations integrated them with corporate IT networks (and increasingly the internet) for efficiency and remote monitoring, attackers gained pathways to reach physical processes they could never previously access, enabling cyber-physical attacks like Stuxnet that caused real-world machinery damage.

Why the distractors are wrong:

• A (Proprietary protocols): While obscurity isn't security, proprietary protocols actually add a layer of difficulty for attackers, not a common exploitable vulnerability.
• B (Lack of real-time data analysis): This is a capability gap, not a security vulnerability - it describes what OT systems may lack operationally, not a vector attackers exploit.
• D (Absence of physical security controls): Physical security gaps are a concern, but the question asks about cyber-physical attacks, which specifically exploit digital pathways to cause physical harm - not physical intrusion itself.

Memory tip: Think "IT/OT convergence = attack surface expansion." The moment an air-gapped OT system gets a network bridge to IT, it inherits all the vulnerabilities of the internet-connected world while still controlling physical equipment - that combination is the core danger.

No community discussion yet for this question.