While performing a vulnerability assessment over an OT/ICS environment, the tester runs a tool that causes a malfunction on one of the systems in charge of water pumping at the plant. Which of the…

Question

Options

• AUsing Nmap or other scanning solutions that also are used on IT environments
• BNot testing water pumps or other OT/ICS devices that are critical
• CChanging the scanning approach to use passive-only scans and tools
• DIncluding disruption of services on the SOW

• A
  7% (4)
• B
  2% (1)
• C
  81% (48)
• D
  10% (6)

Explanation

OT (Operational Technology) and ICS (Industrial Control Systems) environments are sensitive and designed for reliability and availability. Active scanning tools and techniques commonly used in IT environments can inadvertently cause disruptions, such as system malfunctions or crashes, because OT/ICS devices may not handle intrusive traffic well. To minimize the risk of disruptions: - A passive-only scanning approach involves tools that monitor network traffic without actively interacting with devices. This avoids the risks associated with intrusive probing and ensures the stability of critical systems. - Tools like Tenable.ot or Nozomi Networks focus on passive monitoring for vulnerabilities and misconfigurations without interfering with normal operations.

No community discussion yet for this question.