In which two ways could you minimize the impact of monitoring an industrial network? (Choose two.)

Question

Options

• ASend random messages to a device and see what the response is.
• BDo frequent ping sweeps to industrial devices to check for their proper operations.
• CMake a copy of all the network traffic and analyze it offline.
• DUse an industrial-network-grade IDS-IPS system.

• A
  7% (2)
• B
  14% (4)
• C
  79% (23)

Explanation

Passive traffic capture (C) minimizes impact because it collects a mirror/copy of traffic without injecting any packets into the network, leaving industrial devices completely undisturbed. An industrial-grade IDS/IPS (D) is purpose-built to monitor OT/ICS environments with minimal latency and without disrupting time-sensitive control traffic that industrial protocols depend on.

Why the distractors are wrong:

• A (sending random messages) is actively dangerous - industrial devices like PLCs can behave unpredictably or even fail when they receive unexpected commands, potentially causing physical harm.
• B (frequent ping sweeps) introduces unnecessary traffic and can overwhelm resource-constrained industrial devices that weren't designed for general-purpose IP networking, disrupting real-time operations.

Memory tip: Think "passive and purpose-built." The two correct answers share a theme - C is passive (listen, don't touch), and D is purpose-built for industrial environments. Any monitoring technique that actively probes or floods an industrial network is the wrong answer, because industrial devices prioritize availability and real-time response over IT-style diagnostics.

No community discussion yet for this question.