A manufacturer has hired a third-party consultant to assess the security of an OT network that includes both fragile and legacy equipment. Which of the following must be considered to ensure the…

The correct answer is C. Using passive instead of active vulnerability scans. In environments with fragile and legacy equipment, passive scanning is preferred to prevent any potential disruptions that active scanning might cause. When assessing the security of an Operational Technology (OT) network, especially one with fragile and legacy equipment, it's…

Submitted by yasin.bd· Mar 6, 2026Vulnerability Management

Question

A manufacturer has hired a third-party consultant to assess the security of an OT network that includes both fragile and legacy equipment. Which of the following must be considered to ensure the consultant does no harm to operations?

Options

AEmploying Nmap Scripting Engine scanning techniques
BPreserving the state of PLC ladder logic prior to scanning
CUsing passive instead of active vulnerability scans
DRunning scans during off-peak manufacturing hours

How the community answered

(48 responses)

A
15% (7)
B
6% (3)
C
52% (25)
D
27% (13)

Explanation

In environments with fragile and legacy equipment, passive scanning is preferred to prevent any potential disruptions that active scanning might cause. When assessing the security of an Operational Technology (OT) network, especially one with fragile and legacy equipment, it's crucial to use passive instead of active vulnerability scans. Active scanning can sometimes disrupt the operation of sensitive or older equipment. Passive scanning listens to network traffic without sending probing requests, thus minimizing the risk of

Topics

#OT security#Vulnerability scanning#Passive scanning#Fragile systems

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice