PT0-002 · Question #62
A company hired a penetration-testing team to review the cyber-physical systems in a manufacturing plant. The team immediately discovered the supervisory systems and PLCs are both connected to the com
The correct answer is C. Controllers will not validate the origin of commands.. PLC is a programmable logic controller. These are essentially maleable devices in that they can be controlled/manipulated/coded/programed to do whatever you need them to do for a business. They most likely lack ability to self-regulate/correct. This usually is the role of a secur
Question
A company hired a penetration-testing team to review the cyber-physical systems in a manufacturing plant. The team immediately discovered the supervisory systems and PLCs are both connected to the company intranet. Which of the following assumptions, if made by the penetration-testing team, is MOST likely to be valid?
Options
- APLCs will not act upon commands injected over the network.
- BSupervisors and controllers are on a separate virtual network by default.
- CControllers will not validate the origin of commands.
- DSupervisory systems will detect a malicious injection of code/commands.
How the community answered
(41 responses)- A2% (1)
- B17% (7)
- C73% (30)
- D7% (3)
Explanation
PLC is a programmable logic controller. These are essentially maleable devices in that they can be controlled/manipulated/coded/programed to do whatever you need them to do for a business. They most likely lack ability to self-regulate/correct. This usually is the role of a security/network engineer. If one is able to send code to one of these devices, more likely than not, it will be accepted unless compensating controls have been put in place by an admin. this is my best guess. C makes the most sense to me for these reasons.
Topics
Community Discussion
No community discussion yet for this question.