Which of the following BEST describes why vulnerabilities found in ICS and SCADA can be difficult to remediate?
A. ICS/SCADA systems are not supported by the CVE publications.
B. ICS/SCADA systems rarely have full security functionality.
C. ICS/SCADA systems do not allow remote connections.
D. ICS/SCADA systems use encrypted traffic to communicate between devices.
CS0-002: CompTIA CySA+ ExamFULL Printable PDF and Software. VALID exam to help you PASS. |
 |
B.
In fact, most ICS controllers do not have authentication features and do not support encrypted communication, and they are rarely or never patched. Why is that? All these aspects may impair the high availability, and we know that is a priority number one when it comes to ICSes.
Most components in ICS networks are not designed with security in mind, and even nowadays they lack the security controls and visibility ubiquitous in corporate IT networks.