Exam Bundle

A lost-device drill removes enterprise data without requiring unsupported access to the employee's personal photos. That observation would verify another scenario: An employee loses a phone containing company email and the organization has no way to remove only work data. The corrective step for that other scenario is: Use managed work containers, enforced screen locks and scoped remote work-profile wipe capabilities. But Brookside Manufacturing is evaluating: An endpoint team equates a successful mobile OS update with a fully secure device even though an unapproved sideloaded app persists. The necessary outcome is: A noncompliant test device is flagged or quarantined despite showing the latest OS patch version.

The app operates its approved workflow without unused microphone or background location access. That observation would verify another scenario: A corporate iOS app uses broad background permissions for location and microphone even though its business function requires neither. The corrective step for that other scenario is: Review mobile permissions, remove unnecessary entitlements and require just-in-time consent for legitimate capabilities. But Brookside Manufacturing is evaluating: An endpoint team equates a successful mobile OS update with a fully secure device even though an unapproved sideloaded app persists. The necessary outcome is: A noncompliant test device is flagged or quarantined despite showing the latest OS patch version.

A test account cannot retrieve an unrelated customer record by changing a request identifier. That observation would verify another scenario: A mobile API gives a user access to another customer's record because the app hides the other record in its UI but the API does not check ownership. The corrective step for that other scenario is: Enforce object-level server authorization for every mobile API endpoint and use the UI only for presentation. But Brookside Manufacturing is evaluating: An endpoint team equates a successful mobile OS update with a fully secure device even though an unapproved sideloaded app persists. The necessary outcome is: A noncompliant test device is flagged or quarantined despite showing the latest OS patch version.

Use segmented OT zones and controlled brokered remote access with named approval and monitoring. This is an appropriate control for a different issue: An industrial controller network is directly routed to the public internet to simplify vendor maintenance. The Silvercrest University finding instead concerns: A smart building gateway ships with a universal administrator password shared across every deployed device. It does not demonstrate the required correction. The decisive test remains: A copied factory password cannot administer another installed gateway and approved management remains available.

Maintain lifecycle inventory, approved patch exceptions and a documented replacement or compensating-control plan. This is an appropriate control for a different issue: A smart meter remains deployed despite unsupported firmware and no asset record linking it to a maintenance owner. The Silvercrest University finding instead concerns: A smart building gateway ships with a universal administrator password shared across every deployed device. It does not demonstrate the required correction. The decisive test remains: A copied factory password cannot administer another installed gateway and approved management remains available.

Issue scoped per-device credentials with rotation, inventory ownership and independent revocation. This is an appropriate control for a different issue: A building automation system reuses the same cloud API token on hundreds of field devices and cannot revoke one compromised unit. The Silvercrest University finding instead concerns: A smart building gateway ships with a universal administrator password shared across every deployed device. It does not demonstrate the required correction. The decisive test remains: A copied factory password cannot administer another installed gateway and approved management remains available.

The cloud receiver accepts authorized devices only and network inspection cannot read protected telemetry payloads. That observation would verify another scenario: An IoT data collector forwards telemetry to cloud endpoints using an unauthenticated plaintext protocol across an untrusted link. The corrective step for that other scenario is: Apply mutual authentication or equivalent trusted identities and encrypted transport suited to device capabilities. But Silvercrest University is evaluating: A smart building gateway ships with a universal administrator password shared across every deployed device. The necessary outcome is: A copied factory password cannot administer another installed gateway and approved management remains available.

Ordinary office devices cannot initiate controller administration while approved safety-monitoring flows continue. That observation would verify another scenario: A water treatment site uses one flat network for operator workstations, engineering laptops and process controllers. The corrective step for that other scenario is: Segment roles with explicit OT firewall rules and controlled jump-host access, considering operational safety constraints. But Silvercrest University is evaluating: A smart building gateway ships with a universal administrator password shared across every deployed device. The necessary outcome is: A copied factory password cannot administer another installed gateway and approved management remains available.

Revoking a single test device's token does not disconnect the rest of the authorized fleet. That observation would verify another scenario: A building automation system reuses the same cloud API token on hundreds of field devices and cannot revoke one compromised unit. The corrective step for that other scenario is: Issue scoped per-device credentials with rotation, inventory ownership and independent revocation. But Silvercrest University is evaluating: A smart building gateway ships with a universal administrator password shared across every deployed device. The necessary outcome is: A copied factory password cannot administer another installed gateway and approved management remains available.

Use segmented OT zones and controlled brokered remote access with named approval and monitoring. This is an appropriate control for a different issue: An industrial controller network is directly routed to the public internet to simplify vendor maintenance. The Highland Education finding instead concerns: A smart building gateway ships with a universal administrator password shared across every deployed device. It does not demonstrate the required correction. The decisive test remains: A copied factory password cannot administer another installed gateway and approved management remains available.

Require vendor-approved passive discovery or a validated maintenance-window test procedure for sensitive OT devices. This is an appropriate control for a different issue: A manufacturing engineer schedules active vulnerability probes against fragile programmable logic controllers during peak production. The Highland Education finding instead concerns: A smart building gateway ships with a universal administrator password shared across every deployed device. It does not demonstrate the required correction. The decisive test remains: A copied factory password cannot administer another installed gateway and approved management remains available.

Apply mutual authentication or equivalent trusted identities and encrypted transport suited to device capabilities. This is an appropriate control for a different issue: An IoT data collector forwards telemetry to cloud endpoints using an unauthenticated plaintext protocol across an untrusted link. The Highland Education finding instead concerns: A smart building gateway ships with a universal administrator password shared across every deployed device. It does not demonstrate the required correction. The decisive test remains: A copied factory password cannot administer another installed gateway and approved management remains available.

A general office user cannot view restricted streams while approved operators retain necessary access. That observation would verify another scenario: A camera management platform exposes device inventory and live streams to any authenticated office user regardless of role. The corrective step for that other scenario is: Enforce per-device authorization, least-privilege roles and audit records for sensitive video access. But Highland Education is evaluating: A smart building gateway ships with a universal administrator password shared across every deployed device. The necessary outcome is: A copied factory password cannot administer another installed gateway and approved management remains available.

Ordinary office devices cannot initiate controller administration while approved safety-monitoring flows continue. That observation would verify another scenario: A water treatment site uses one flat network for operator workstations, engineering laptops and process controllers. The corrective step for that other scenario is: Segment roles with explicit OT firewall rules and controlled jump-host access, considering operational safety constraints. But Highland Education is evaluating: A smart building gateway ships with a universal administrator password shared across every deployed device. The necessary outcome is: A copied factory password cannot administer another installed gateway and approved management remains available.

An external test cannot reach controller interfaces directly and authorized vendor sessions are recorded through the access gateway. That observation would verify another scenario: An industrial controller network is directly routed to the public internet to simplify vendor maintenance. The corrective step for that other scenario is: Use segmented OT zones and controlled brokered remote access with named approval and monitoring. But Highland Education is evaluating: A smart building gateway ships with a universal administrator password shared across every deployed device. The necessary outcome is: A copied factory password cannot administer another installed gateway and approved management remains available.

Enforce per-device authorization, least-privilege roles and audit records for sensitive video access. This is an appropriate control for a different issue: A camera management platform exposes device inventory and live streams to any authenticated office user regardless of role. The Harborline Logistics finding instead concerns: An industrial controller network is directly routed to the public internet to simplify vendor maintenance. It does not demonstrate the required correction. The decisive test remains: An external test cannot reach controller interfaces directly and authorized vendor sessions are recorded through the access gateway.

Require vendor-approved passive discovery or a validated maintenance-window test procedure for sensitive OT devices. This is an appropriate control for a different issue: A manufacturing engineer schedules active vulnerability probes against fragile programmable logic controllers during peak production. The Harborline Logistics finding instead concerns: An industrial controller network is directly routed to the public internet to simplify vendor maintenance. It does not demonstrate the required correction. The decisive test remains: An external test cannot reach controller interfaces directly and authorized vendor sessions are recorded through the access gateway.

Require signed firmware, verified update provenance and a tested recovery/rollback path. This is an appropriate control for a different issue: A sensor fleet lacks a secure firmware-update process and accepts update files from an unauthenticated network share. The Harborline Logistics finding instead concerns: An industrial controller network is directly routed to the public internet to simplify vendor maintenance. It does not demonstrate the required correction. The decisive test remains: An external test cannot reach controller interfaces directly and authorized vendor sessions are recorded through the access gateway.

Ordinary office devices cannot initiate controller administration while approved safety-monitoring flows continue. That observation would verify another scenario: A water treatment site uses one flat network for operator workstations, engineering laptops and process controllers. The corrective step for that other scenario is: Segment roles with explicit OT firewall rules and controlled jump-host access, considering operational safety constraints. But Harborline Logistics is evaluating: An industrial controller network is directly routed to the public internet to simplify vendor maintenance. The necessary outcome is: An external test cannot reach controller interfaces directly and authorized vendor sessions are recorded through the access gateway.

The cloud receiver accepts authorized devices only and network inspection cannot read protected telemetry payloads. That observation would verify another scenario: An IoT data collector forwards telemetry to cloud endpoints using an unauthenticated plaintext protocol across an untrusted link. The corrective step for that other scenario is: Apply mutual authentication or equivalent trusted identities and encrypted transport suited to device capabilities. But Harborline Logistics is evaluating: An industrial controller network is directly routed to the public internet to simplify vendor maintenance. The necessary outcome is: An external test cannot reach controller interfaces directly and authorized vendor sessions are recorded through the access gateway.

Every meter has a responsible owner and outdated units are isolated or replaced according to reviewed risk deadlines. That observation would verify another scenario: A smart meter remains deployed despite unsupported firmware and no asset record linking it to a maintenance owner. The corrective step for that other scenario is: Maintain lifecycle inventory, approved patch exceptions and a documented replacement or compensating-control plan. But Harborline Logistics is evaluating: An industrial controller network is directly routed to the public internet to simplify vendor maintenance. The necessary outcome is: An external test cannot reach controller interfaces directly and authorized vendor sessions are recorded through the access gateway.

Segment roles with explicit OT firewall rules and controlled jump-host access, considering operational safety constraints. This is an appropriate control for a different issue: A water treatment site uses one flat network for operator workstations, engineering laptops and process controllers. The Maplewood Schools finding instead concerns: An industrial controller network is directly routed to the public internet to simplify vendor maintenance. It does not demonstrate the required correction. The decisive test remains: An external test cannot reach controller interfaces directly and authorized vendor sessions are recorded through the access gateway.

Coordinate containment with the process owner and safety procedures, using staged isolation where appropriate. This is an appropriate control for a different issue: An OT incident response playbook calls for immediately shutting down a controller that regulates a safety-critical process. The Maplewood Schools finding instead concerns: An industrial controller network is directly routed to the public internet to simplify vendor maintenance. It does not demonstrate the required correction. The decisive test remains: An external test cannot reach controller interfaces directly and authorized vendor sessions are recorded through the access gateway.

Enforce per-device authorization, least-privilege roles and audit records for sensitive video access. This is an appropriate control for a different issue: A camera management platform exposes device inventory and live streams to any authenticated office user regardless of role. The Maplewood Schools finding instead concerns: An industrial controller network is directly routed to the public internet to simplify vendor maintenance. It does not demonstrate the required correction. The decisive test remains: An external test cannot reach controller interfaces directly and authorized vendor sessions are recorded through the access gateway.

A tabletop proves the incident team can reduce network exposure without creating an uncontrolled physical safety hazard. That observation would verify another scenario: An OT incident response playbook calls for immediately shutting down a controller that regulates a safety-critical process. The corrective step for that other scenario is: Coordinate containment with the process owner and safety procedures, using staged isolation where appropriate. But Maplewood Schools is evaluating: An industrial controller network is directly routed to the public internet to simplify vendor maintenance. The necessary outcome is: An external test cannot reach controller interfaces directly and authorized vendor sessions are recorded through the access gateway.

Devices reject a tampered update image and a valid approved update completes successfully. That observation would verify another scenario: A sensor fleet lacks a secure firmware-update process and accepts update files from an unauthenticated network share. The corrective step for that other scenario is: Require signed firmware, verified update provenance and a tested recovery/rollback path. But Maplewood Schools is evaluating: An industrial controller network is directly routed to the public internet to simplify vendor maintenance. The necessary outcome is: An external test cannot reach controller interfaces directly and authorized vendor sessions are recorded through the access gateway.

Revoking a single test device's token does not disconnect the rest of the authorized fleet. That observation would verify another scenario: A building automation system reuses the same cloud API token on hundreds of field devices and cannot revoke one compromised unit. The corrective step for that other scenario is: Issue scoped per-device credentials with rotation, inventory ownership and independent revocation. But Maplewood Schools is evaluating: An industrial controller network is directly routed to the public internet to simplify vendor maintenance. The necessary outcome is: An external test cannot reach controller interfaces directly and authorized vendor sessions are recorded through the access gateway.

Replace default credentials with unique managed identities and restrict device-management access. This is an appropriate control for a different issue: A smart building gateway ships with a universal administrator password shared across every deployed device. The Timberline Foods finding instead concerns: A manufacturing engineer schedules active vulnerability probes against fragile programmable logic controllers during peak production. It does not demonstrate the required correction. The decisive test remains: The authorized assessment identifies assets without interrupting control signals or operational availability.

Coordinate containment with the process owner and safety procedures, using staged isolation where appropriate. This is an appropriate control for a different issue: An OT incident response playbook calls for immediately shutting down a controller that regulates a safety-critical process. The Timberline Foods finding instead concerns: A manufacturing engineer schedules active vulnerability probes against fragile programmable logic controllers during peak production. It does not demonstrate the required correction. The decisive test remains: The authorized assessment identifies assets without interrupting control signals or operational availability.

Maintain lifecycle inventory, approved patch exceptions and a documented replacement or compensating-control plan. This is an appropriate control for a different issue: A smart meter remains deployed despite unsupported firmware and no asset record linking it to a maintenance owner. The Timberline Foods finding instead concerns: A manufacturing engineer schedules active vulnerability probes against fragile programmable logic controllers during peak production. It does not demonstrate the required correction. The decisive test remains: The authorized assessment identifies assets without interrupting control signals or operational availability.

A tabletop proves the incident team can reduce network exposure without creating an uncontrolled physical safety hazard. That observation would verify another scenario: An OT incident response playbook calls for immediately shutting down a controller that regulates a safety-critical process. The corrective step for that other scenario is: Coordinate containment with the process owner and safety procedures, using staged isolation where appropriate. But Timberline Foods is evaluating: A manufacturing engineer schedules active vulnerability probes against fragile programmable logic controllers during peak production. The necessary outcome is: The authorized assessment identifies assets without interrupting control signals or operational availability.

An external test cannot reach controller interfaces directly and authorized vendor sessions are recorded through the access gateway. That observation would verify another scenario: An industrial controller network is directly routed to the public internet to simplify vendor maintenance. The corrective step for that other scenario is: Use segmented OT zones and controlled brokered remote access with named approval and monitoring. But Timberline Foods is evaluating: A manufacturing engineer schedules active vulnerability probes against fragile programmable logic controllers during peak production. The necessary outcome is: The authorized assessment identifies assets without interrupting control signals or operational availability.

Ordinary office devices cannot initiate controller administration while approved safety-monitoring flows continue. That observation would verify another scenario: A water treatment site uses one flat network for operator workstations, engineering laptops and process controllers. The corrective step for that other scenario is: Segment roles with explicit OT firewall rules and controlled jump-host access, considering operational safety constraints. But Timberline Foods is evaluating: A manufacturing engineer schedules active vulnerability probes against fragile programmable logic controllers during peak production. The necessary outcome is: The authorized assessment identifies assets without interrupting control signals or operational availability.