CS0-003 · Question #652
A security analyst is implementing a process to perform vulnerability management on an ОТ environment: - Systems must remain on an isolated network. - The process should focus on external threats. - N
The correct answer is A. Implement agentless sensors at the network edge.. Agentless sensors placed at the network edge allow the analyst to observe traffic passively without installing software, modifying packets, or introducing latency. This approach fits OT requirements while enabling detection of external threats in an isolated network.
Question
A security analyst is implementing a process to perform vulnerability management on an ОТ environment:
- Systems must remain on an isolated network.
- The process should focus on external threats.
- No additional software can be deployed on the systems.
- Transmitted packets cannot be modified or dropped.
- Additional processing delays are not tolerated.
Which of the following is the best way to securely meet the requirements?
Options
- AImplement agentless sensors at the network edge.
- BUse reverse engineering to detect flaws on the in-scope systems.
- CDeploy an IPS In-line with the network traffic.
- DCheck the compatibility of an EDR agent with the OSs used on the ОТ environment.
How the community answered
(33 responses)- A55% (18)
- B15% (5)
- C24% (8)
- D6% (2)
Explanation
Agentless sensors placed at the network edge allow the analyst to observe traffic passively without installing software, modifying packets, or introducing latency. This approach fits OT requirements while enabling detection of external threats in an isolated network.
Topics
Community Discussion
No community discussion yet for this question.