OT vs IT: Securing the Industrial World

सम्यक् उत्तराणि अत्र न दर्श्यन्ते, अतः क्रीडायां तानि आश्चर्यम् एव भविष्यन्ति।

1. प्रश्नः 1

   In OT security, which goal usually comes first?

   • Availability and safety of the process
   • Confidentiality of stored data
   • Anonymity of the plant operators
   • Speed of software updates

2. प्रश्नः 2

   Why are PLCs in a plant often left unpatched for years?

   • Their vendors forbid any software changes
   • Patching needs downtime and retesting the process
   • They cannot be infected by any malware
   • Patches for them only exist on paper

3. प्रश्नः 3

   Which malware, found in 2010, sabotaged Iranian uranium centrifuges?

   • WannaCry
   • NotPetya
   • Stuxnet
   • Mirai

4. प्रश्नः 4

   What is a key security weakness of the classic Modbus protocol?

   • It only works over satellite links
   • It has no built-in authentication
   • It encrypts data with a broken cipher
   • It needs a cloud server to run

5. प्रश्नः 5

   In the Purdue model, which level holds the physical sensors and actuators?

   • Level 3
   • Level 4
   • Level 0
   • Level 2

6. प्रश्नः 6

   A plant claims its OT network is air-gapped. Which still threatens it?

   • A USB stick plugged in by a contractor
   • Phishing emails sent to the OT switches
   • Ransomware in the public cloud only
   • Weak passwords on the cafeteria Wi-Fi

7. प्रश्नः 7

   Which standard series is built specifically for industrial automation security?

   • ISO/IEC 27001
   • IEC 62443
   • PCI DSS
   • ISO 9001

8. प्रश्नः 8

   Why is aggressive active scanning risky on an OT network?

   • Old devices may crash from unexpected traffic
   • Scanners legally count as an attack there
   • OT devices hide behind invisible IP addresses
   • Scans permanently erase network switch logs

9. प्रश्नः 9

   In 2015, attackers cut power to about 225,000 people in which country?

   • Estonia
   • Ukraine
   • Germany
   • Georgia

10. प्रश्नः 10

    What device allows data to flow only one way out of an OT network?

    • A load balancer
    • A VPN concentrator
    • A data diode
    • A proxy server