OT vs IT: Securing the Industrial World
Power plants, water works and factories run on operational technology, and protecting it takes more than a regular firewall.
- ʻEnehana
- Nā pākeke
- Waena
- Hoʻonaʻauao
- 10 nīnau
- ma kahi o 5 minuke
- Manaʻo loiloi ma hope o kēlā me kēia nīnau
Hoʻokūkū kekahi me kekahi
No nā keiki a me nā naʻau pāʻani
Nānā i nā nīnau
ʻAʻole i hōʻike ʻia nā pane pololei, i mea e pūʻiwa ai ʻoe ke pāʻani ʻoe.
Nīnau 1
In OT security, which goal usually comes first?
- Availability and safety of the process
- Confidentiality of stored data
- Anonymity of the plant operators
- Speed of software updates
Nīnau 2
Why are PLCs in a plant often left unpatched for years?
- Their vendors forbid any software changes
- Patching needs downtime and retesting the process
- They cannot be infected by any malware
- Patches for them only exist on paper
Nīnau 3
Which malware, found in 2010, sabotaged Iranian uranium centrifuges?
- WannaCry
- NotPetya
- Stuxnet
- Mirai
Nīnau 4
What is a key security weakness of the classic Modbus protocol?
- It only works over satellite links
- It has no built-in authentication
- It encrypts data with a broken cipher
- It needs a cloud server to run
Nīnau 5
In the Purdue model, which level holds the physical sensors and actuators?
- Level 3
- Level 4
- Level 0
- Level 2
Nīnau 6
A plant claims its OT network is air-gapped. Which still threatens it?
- A USB stick plugged in by a contractor
- Phishing emails sent to the OT switches
- Ransomware in the public cloud only
- Weak passwords on the cafeteria Wi-Fi
Nīnau 7
Which standard series is built specifically for industrial automation security?
- ISO/IEC 27001
- IEC 62443
- PCI DSS
- ISO 9001
Nīnau 8
Why is aggressive active scanning risky on an OT network?
- Old devices may crash from unexpected traffic
- Scanners legally count as an attack there
- OT devices hide behind invisible IP addresses
- Scans permanently erase network switch logs
Nīnau 9
In 2015, attackers cut power to about 225,000 people in which country?
- Estonia
- Ukraine
- Germany
- Georgia
Nīnau 10
What device allows data to flow only one way out of an OT network?
- A load balancer
- A VPN concentrator
- A data diode
- A proxy server
