CAS-003 · Question #598
A large industrial system's smart generator monitors the system status and sends alerts to third- party maintenance personnel when critical failures occur. While reviewing the network logs, the…
The correct answer is A. Segmentation. Network segmentation places the smart generator (an OT/IoT device) in its own isolated network segment, separate from internal resources like file servers. This prevents unauthorized lateral communication to internal hosts while still allowing the generator to send outbound…
Question
A large industrial system's smart generator monitors the system status and sends alerts to third- party maintenance personnel when critical failures occur. While reviewing the network logs, the company's security manager notices the generator's IP is sending packets to an internal file server's IP. Which of the following mitigations would be BEST for the security manager to implement while maintaining alerting capabilities?
Options
- ASegmentation
- BFirewall whitelisting
- CContainment
- DIsolation
How the community answered
(19 responses)- A84% (16)
- C11% (2)
- D5% (1)
Explanation
Network segmentation places the smart generator (an OT/IoT device) in its own isolated network segment, separate from internal resources like file servers. This prevents unauthorized lateral communication to internal hosts while still allowing the generator to send outbound alerts to third-party maintenance personnel - satisfying both the security and alerting requirements. Isolation (D) would block all network traffic including legitimate alerts, breaking the alerting capability. Containment (C) is a reactive incident response action, not a proactive architecture control. Firewall whitelisting (B) could help but is narrower and harder to maintain than proper architectural segmentation.
Topics
Community Discussion
No community discussion yet for this question.