Do you need help deciding which OT Security training is right for you?

Take our Self-Assessment Questionnaires!

Our Self-Assessment Questionnaires give you an idea of which OT Security training is right for you. To enroll in the advanced training courses, we require proof of your experience and training in the OT Security area, regardless of the results of the questionnaires. Based on the provided documents, we will decide whether to enroll you directly in the advanced course.

For more information about our training program click here: Limes Academy

Certified OT Security Practitioner
Certified OT Security Technical Expert
Certified OT Security Manager

To the quiz

Certified OT Security

Technical Expert

To the quiz

Certified OT

Security Manager

Certified OT Security Technical Expert

1. Which of the following is not a valid PROFINET communication method?

PROFINET RT Unicast

PROFINET RT Multicast

PROFINET Context Manager

PROFINET Data Link

2. Which of the following techniques is not a DoS attack type?

Use of malfunctions and bugs

Flooding

Amplification

Content Security Policy (CSP) Bypass

3. What measure is the most effective to prevent a SMB Relay attack:

Enforcing SMB Signing

Disabling the local admin shares for SMB

Using only SMBv3

Disabling NTLMv1

4. With asymmetric encryption

all communication participants use the same key pair

all communication participants use an individual key pair

the advantage is that it provides better performance compared to symmetric encryption

it does not matter for security how the private keys are exchanged between the individual participants

5. Which of the following statements is true about honeypots?

Anything going to a honeypot is likely a probe or attack

High-interaction honeypots can handle a lot more traffic as low interaction honeypots

Honeypots need to be easy to distinguish from real systems to prevent accidental usage

Logs of the honeypot should be only stored on the honeypot, to reduce the risk of exposing sensitive information

6. Which of the following tasks is not a hardening measure?

Deactivate or remove unnecessary software and services

Restrict access or deactivate unused interfaces

Allocate pre-authorized network addresses

Deactivate or remove unnecessary documents

7. Which of the following statements about keyloggers is wrong?

Keyloggers only work on legacy Windows versions like XP as driver signing is preventing the installation in later versions

Keyloggers can be deployed as a hardware implant

Keyloggers can be deployed as a software implant

Hardware keylogger can store keystrokes on a storage of the implant e.g. internal flash

8. What is MITRE ATT&CK for ICS?

a tool for hacking PLCs

is a knowledge base useful for describing the actions an adversary may take while operating within an ICS network

an IDS system which can detect most kind ICS adversaries

a yearly security conference with a focus on ICS environment

Time's up

Certified OT Security Manager

1. What is the third maturity level according to IEC 62443-2-4 ?

Managed

Improved

Defined

Epic

2. Which of the following requirements is imported for a secure supply chain?

That legacy support for EoL products is assured

There is mandatory validation that the components used haven't had a single CVE in the last year

That no open-source software was purchased

That a pentest of each library was conducted prior to purchasing

3. Network segmentation should be implemented on which of the following criteria?

Based on the same communication protocols

Based on the same case color

Based on the age of the componentes

Based on the defined risk level for the component

4. A jump server

spans two dissimilar security zones and provides a controlled means of access between them

allows a user to bypass authentication security measures

is a useful concept to think about, but not yet an viable technology

a model for network segmentation that fits every industry

5. NAC stands for

Network Audit Control

Network Authentication Control

Network Access Control

Network Authorization Control

6. Which of the following statements is not true about hardening?

Hardening processes are very individually dependent on the systems or software to be hardened

Existing guides on hardening specific systems can help with the implementation

By implementing hardening measures the attack surface of a system is reduced

By implementing hardening measures the attack surface of a system is increased

7. Which of the following information should be included in log records?

Timestamp, source, category/type, event id, event result

Timestamp, destination, category/type, event id, event result

Timestamp, source, category/type, session id, event result

Timestamp, destination, category/type, user id, user password

8. Fast recovery of systems and their availability, is

an essential factor for minimizing the extent of damage and business loss

the most important part of the incident handling process

only possible with high-availability systems

not necessary if you have redundant systems

Time's up

Self-Assessment Questionnaires

Do you need help deciding which OT Security training is right for you?

Take our Self-Assessment Questionnaires!

To the quiz

Certified OT Security

Technical Expert

To the quiz

Certified OT

Security Manager

Certified OT Security Technical Expert

Certified OT Security Manager

Hagenberg

Vienna

Berlin