Exam Bundle

A tabletop proves the incident team can reduce network exposure without creating an uncontrolled physical safety hazard. That observation would verify another scenario: An OT incident response playbook calls for immediately shutting down a controller that regulates a safety-critical process. The corrective step for that other scenario is: Coordinate containment with the process owner and safety procedures, using staged isolation where appropriate. But Timberline Foods is evaluating: A manufacturing engineer schedules active vulnerability probes against fragile programmable logic controllers during peak production. The necessary outcome is: The authorized assessment identifies assets without interrupting control signals or operational availability.

An external test cannot reach controller interfaces directly and authorized vendor sessions are recorded through the access gateway. That observation would verify another scenario: An industrial controller network is directly routed to the public internet to simplify vendor maintenance. The corrective step for that other scenario is: Use segmented OT zones and controlled brokered remote access with named approval and monitoring. But Timberline Foods is evaluating: A manufacturing engineer schedules active vulnerability probes against fragile programmable logic controllers during peak production. The necessary outcome is: The authorized assessment identifies assets without interrupting control signals or operational availability.

Ordinary office devices cannot initiate controller administration while approved safety-monitoring flows continue. That observation would verify another scenario: A water treatment site uses one flat network for operator workstations, engineering laptops and process controllers. The corrective step for that other scenario is: Segment roles with explicit OT firewall rules and controlled jump-host access, considering operational safety constraints. But Timberline Foods is evaluating: A manufacturing engineer schedules active vulnerability probes against fragile programmable logic controllers during peak production. The necessary outcome is: The authorized assessment identifies assets without interrupting control signals or operational availability.

Enforce per-device authorization, least-privilege roles and audit records for sensitive video access. This is an appropriate control for a different issue: A camera management platform exposes device inventory and live streams to any authenticated office user regardless of role. The Silvercrest University finding instead concerns: A manufacturing engineer schedules active vulnerability probes against fragile programmable logic controllers during peak production. It does not demonstrate the required correction. The decisive test remains: The authorized assessment identifies assets without interrupting control signals or operational availability.

Replace default credentials with unique managed identities and restrict device-management access. This is an appropriate control for a different issue: A smart building gateway ships with a universal administrator password shared across every deployed device. The Silvercrest University finding instead concerns: A manufacturing engineer schedules active vulnerability probes against fragile programmable logic controllers during peak production. It does not demonstrate the required correction. The decisive test remains: The authorized assessment identifies assets without interrupting control signals or operational availability.

Issue scoped per-device credentials with rotation, inventory ownership and independent revocation. This is an appropriate control for a different issue: A building automation system reuses the same cloud API token on hundreds of field devices and cannot revoke one compromised unit. The Silvercrest University finding instead concerns: A manufacturing engineer schedules active vulnerability probes against fragile programmable logic controllers during peak production. It does not demonstrate the required correction. The decisive test remains: The authorized assessment identifies assets without interrupting control signals or operational availability.

A copied factory password cannot administer another installed gateway and approved management remains available. That observation would verify another scenario: A smart building gateway ships with a universal administrator password shared across every deployed device. The corrective step for that other scenario is: Replace default credentials with unique managed identities and restrict device-management access. But Silvercrest University is evaluating: A manufacturing engineer schedules active vulnerability probes against fragile programmable logic controllers during peak production. The necessary outcome is: The authorized assessment identifies assets without interrupting control signals or operational availability.

Ordinary office devices cannot initiate controller administration while approved safety-monitoring flows continue. That observation would verify another scenario: A water treatment site uses one flat network for operator workstations, engineering laptops and process controllers. The corrective step for that other scenario is: Segment roles with explicit OT firewall rules and controlled jump-host access, considering operational safety constraints. But Silvercrest University is evaluating: A manufacturing engineer schedules active vulnerability probes against fragile programmable logic controllers during peak production. The necessary outcome is: The authorized assessment identifies assets without interrupting control signals or operational availability.

Revoking a single test device's token does not disconnect the rest of the authorized fleet. That observation would verify another scenario: A building automation system reuses the same cloud API token on hundreds of field devices and cannot revoke one compromised unit. The corrective step for that other scenario is: Issue scoped per-device credentials with rotation, inventory ownership and independent revocation. But Silvercrest University is evaluating: A manufacturing engineer schedules active vulnerability probes against fragile programmable logic controllers during peak production. The necessary outcome is: The authorized assessment identifies assets without interrupting control signals or operational availability.

Require vendor-approved passive discovery or a validated maintenance-window test procedure for sensitive OT devices. This is an appropriate control for a different issue: A manufacturing engineer schedules active vulnerability probes against fragile programmable logic controllers during peak production. The Meadowbrook Finance finding instead concerns: A sensor fleet lacks a secure firmware-update process and accepts update files from an unauthenticated network share. It does not demonstrate the required correction. The decisive test remains: Devices reject a tampered update image and a valid approved update completes successfully.

Segment roles with explicit OT firewall rules and controlled jump-host access, considering operational safety constraints. This is an appropriate control for a different issue: A water treatment site uses one flat network for operator workstations, engineering laptops and process controllers. The Meadowbrook Finance finding instead concerns: A sensor fleet lacks a secure firmware-update process and accepts update files from an unauthenticated network share. It does not demonstrate the required correction. The decisive test remains: Devices reject a tampered update image and a valid approved update completes successfully.

Issue scoped per-device credentials with rotation, inventory ownership and independent revocation. This is an appropriate control for a different issue: A building automation system reuses the same cloud API token on hundreds of field devices and cannot revoke one compromised unit. The Meadowbrook Finance finding instead concerns: A sensor fleet lacks a secure firmware-update process and accepts update files from an unauthenticated network share. It does not demonstrate the required correction. The decisive test remains: Devices reject a tampered update image and a valid approved update completes successfully.

The cloud receiver accepts authorized devices only and network inspection cannot read protected telemetry payloads. That observation would verify another scenario: An IoT data collector forwards telemetry to cloud endpoints using an unauthenticated plaintext protocol across an untrusted link. The corrective step for that other scenario is: Apply mutual authentication or equivalent trusted identities and encrypted transport suited to device capabilities. But Meadowbrook Finance is evaluating: A sensor fleet lacks a secure firmware-update process and accepts update files from an unauthenticated network share. The necessary outcome is: Devices reject a tampered update image and a valid approved update completes successfully.

The authorized assessment identifies assets without interrupting control signals or operational availability. That observation would verify another scenario: A manufacturing engineer schedules active vulnerability probes against fragile programmable logic controllers during peak production. The corrective step for that other scenario is: Require vendor-approved passive discovery or a validated maintenance-window test procedure for sensitive OT devices. But Meadowbrook Finance is evaluating: A sensor fleet lacks a secure firmware-update process and accepts update files from an unauthenticated network share. The necessary outcome is: Devices reject a tampered update image and a valid approved update completes successfully.

A tabletop proves the incident team can reduce network exposure without creating an uncontrolled physical safety hazard. That observation would verify another scenario: An OT incident response playbook calls for immediately shutting down a controller that regulates a safety-critical process. The corrective step for that other scenario is: Coordinate containment with the process owner and safety procedures, using staged isolation where appropriate. But Meadowbrook Finance is evaluating: A sensor fleet lacks a secure firmware-update process and accepts update files from an unauthenticated network share. The necessary outcome is: Devices reject a tampered update image and a valid approved update completes successfully.

Coordinate containment with the process owner and safety procedures, using staged isolation where appropriate. This is an appropriate control for a different issue: An OT incident response playbook calls for immediately shutting down a controller that regulates a safety-critical process. The Harborline Logistics finding instead concerns: A sensor fleet lacks a secure firmware-update process and accepts update files from an unauthenticated network share. It does not demonstrate the required correction. The decisive test remains: Devices reject a tampered update image and a valid approved update completes successfully.

Require vendor-approved passive discovery or a validated maintenance-window test procedure for sensitive OT devices. This is an appropriate control for a different issue: A manufacturing engineer schedules active vulnerability probes against fragile programmable logic controllers during peak production. The Harborline Logistics finding instead concerns: A sensor fleet lacks a secure firmware-update process and accepts update files from an unauthenticated network share. It does not demonstrate the required correction. The decisive test remains: Devices reject a tampered update image and a valid approved update completes successfully.

Use segmented OT zones and controlled brokered remote access with named approval and monitoring. This is an appropriate control for a different issue: An industrial controller network is directly routed to the public internet to simplify vendor maintenance. The Harborline Logistics finding instead concerns: A sensor fleet lacks a secure firmware-update process and accepts update files from an unauthenticated network share. It does not demonstrate the required correction. The decisive test remains: Devices reject a tampered update image and a valid approved update completes successfully.

A tabletop proves the incident team can reduce network exposure without creating an uncontrolled physical safety hazard. That observation would verify another scenario: An OT incident response playbook calls for immediately shutting down a controller that regulates a safety-critical process. The corrective step for that other scenario is: Coordinate containment with the process owner and safety procedures, using staged isolation where appropriate. But Harborline Logistics is evaluating: A sensor fleet lacks a secure firmware-update process and accepts update files from an unauthenticated network share. The necessary outcome is: Devices reject a tampered update image and a valid approved update completes successfully.

The cloud receiver accepts authorized devices only and network inspection cannot read protected telemetry payloads. That observation would verify another scenario: An IoT data collector forwards telemetry to cloud endpoints using an unauthenticated plaintext protocol across an untrusted link. The corrective step for that other scenario is: Apply mutual authentication or equivalent trusted identities and encrypted transport suited to device capabilities. But Harborline Logistics is evaluating: A sensor fleet lacks a secure firmware-update process and accepts update files from an unauthenticated network share. The necessary outcome is: Devices reject a tampered update image and a valid approved update completes successfully.

Every meter has a responsible owner and outdated units are isolated or replaced according to reviewed risk deadlines. That observation would verify another scenario: A smart meter remains deployed despite unsupported firmware and no asset record linking it to a maintenance owner. The corrective step for that other scenario is: Maintain lifecycle inventory, approved patch exceptions and a documented replacement or compensating-control plan. But Harborline Logistics is evaluating: A sensor fleet lacks a secure firmware-update process and accepts update files from an unauthenticated network share. The necessary outcome is: Devices reject a tampered update image and a valid approved update completes successfully.

Maintain lifecycle inventory, approved patch exceptions and a documented replacement or compensating-control plan. This is an appropriate control for a different issue: A smart meter remains deployed despite unsupported firmware and no asset record linking it to a maintenance owner. The Alpine Healthcare finding instead concerns: An IoT data collector forwards telemetry to cloud endpoints using an unauthenticated plaintext protocol across an untrusted link. It does not demonstrate the required correction. The decisive test remains: The cloud receiver accepts authorized devices only and network inspection cannot read protected telemetry payloads.

Enforce per-device authorization, least-privilege roles and audit records for sensitive video access. This is an appropriate control for a different issue: A camera management platform exposes device inventory and live streams to any authenticated office user regardless of role. The Alpine Healthcare finding instead concerns: An IoT data collector forwards telemetry to cloud endpoints using an unauthenticated plaintext protocol across an untrusted link. It does not demonstrate the required correction. The decisive test remains: The cloud receiver accepts authorized devices only and network inspection cannot read protected telemetry payloads.

Require signed firmware, verified update provenance and a tested recovery/rollback path. This is an appropriate control for a different issue: A sensor fleet lacks a secure firmware-update process and accepts update files from an unauthenticated network share. The Alpine Healthcare finding instead concerns: An IoT data collector forwards telemetry to cloud endpoints using an unauthenticated plaintext protocol across an untrusted link. It does not demonstrate the required correction. The decisive test remains: The cloud receiver accepts authorized devices only and network inspection cannot read protected telemetry payloads.

A copied factory password cannot administer another installed gateway and approved management remains available. That observation would verify another scenario: A smart building gateway ships with a universal administrator password shared across every deployed device. The corrective step for that other scenario is: Replace default credentials with unique managed identities and restrict device-management access. But Alpine Healthcare is evaluating: An IoT data collector forwards telemetry to cloud endpoints using an unauthenticated plaintext protocol across an untrusted link. The necessary outcome is: The cloud receiver accepts authorized devices only and network inspection cannot read protected telemetry payloads.

Ordinary office devices cannot initiate controller administration while approved safety-monitoring flows continue. That observation would verify another scenario: A water treatment site uses one flat network for operator workstations, engineering laptops and process controllers. The corrective step for that other scenario is: Segment roles with explicit OT firewall rules and controlled jump-host access, considering operational safety constraints. But Alpine Healthcare is evaluating: An IoT data collector forwards telemetry to cloud endpoints using an unauthenticated plaintext protocol across an untrusted link. The necessary outcome is: The cloud receiver accepts authorized devices only and network inspection cannot read protected telemetry payloads.

An external test cannot reach controller interfaces directly and authorized vendor sessions are recorded through the access gateway. That observation would verify another scenario: An industrial controller network is directly routed to the public internet to simplify vendor maintenance. The corrective step for that other scenario is: Use segmented OT zones and controlled brokered remote access with named approval and monitoring. But Alpine Healthcare is evaluating: An IoT data collector forwards telemetry to cloud endpoints using an unauthenticated plaintext protocol across an untrusted link. The necessary outcome is: The cloud receiver accepts authorized devices only and network inspection cannot read protected telemetry payloads.

Maintain lifecycle inventory, approved patch exceptions and a documented replacement or compensating-control plan. This is an appropriate control for a different issue: A smart meter remains deployed despite unsupported firmware and no asset record linking it to a maintenance owner. The Timberline Foods finding instead concerns: An IoT data collector forwards telemetry to cloud endpoints using an unauthenticated plaintext protocol across an untrusted link. It does not demonstrate the required correction. The decisive test remains: The cloud receiver accepts authorized devices only and network inspection cannot read protected telemetry payloads.

Require signed firmware, verified update provenance and a tested recovery/rollback path. This is an appropriate control for a different issue: A sensor fleet lacks a secure firmware-update process and accepts update files from an unauthenticated network share. The Timberline Foods finding instead concerns: An IoT data collector forwards telemetry to cloud endpoints using an unauthenticated plaintext protocol across an untrusted link. It does not demonstrate the required correction. The decisive test remains: The cloud receiver accepts authorized devices only and network inspection cannot read protected telemetry payloads.

Coordinate containment with the process owner and safety procedures, using staged isolation where appropriate. This is an appropriate control for a different issue: An OT incident response playbook calls for immediately shutting down a controller that regulates a safety-critical process. The Timberline Foods finding instead concerns: An IoT data collector forwards telemetry to cloud endpoints using an unauthenticated plaintext protocol across an untrusted link. It does not demonstrate the required correction. The decisive test remains: The cloud receiver accepts authorized devices only and network inspection cannot read protected telemetry payloads.

A tabletop proves the incident team can reduce network exposure without creating an uncontrolled physical safety hazard. That observation would verify another scenario: An OT incident response playbook calls for immediately shutting down a controller that regulates a safety-critical process. The corrective step for that other scenario is: Coordinate containment with the process owner and safety procedures, using staged isolation where appropriate. But Timberline Foods is evaluating: An IoT data collector forwards telemetry to cloud endpoints using an unauthenticated plaintext protocol across an untrusted link. The necessary outcome is: The cloud receiver accepts authorized devices only and network inspection cannot read protected telemetry payloads.

Ordinary office devices cannot initiate controller administration while approved safety-monitoring flows continue. That observation would verify another scenario: A water treatment site uses one flat network for operator workstations, engineering laptops and process controllers. The corrective step for that other scenario is: Segment roles with explicit OT firewall rules and controlled jump-host access, considering operational safety constraints. But Timberline Foods is evaluating: An IoT data collector forwards telemetry to cloud endpoints using an unauthenticated plaintext protocol across an untrusted link. The necessary outcome is: The cloud receiver accepts authorized devices only and network inspection cannot read protected telemetry payloads.

A general office user cannot view restricted streams while approved operators retain necessary access. That observation would verify another scenario: A camera management platform exposes device inventory and live streams to any authenticated office user regardless of role. The corrective step for that other scenario is: Enforce per-device authorization, least-privilege roles and audit records for sensitive video access. But Timberline Foods is evaluating: An IoT data collector forwards telemetry to cloud endpoints using an unauthenticated plaintext protocol across an untrusted link. The necessary outcome is: The cloud receiver accepts authorized devices only and network inspection cannot read protected telemetry payloads.