Quiz Certified OT Security Technical Expert EN

1. Which of the following is not a valid PROFINET communication method?

PROFINET RT Unicast

PROFINET RT Multicast

PROFINET Context Manager

PROFINET Data Link

2. Which of the following techniques is not a DoS attack type?

Use of malfunctions and bugs

Flooding

Amplification

Content Security Policy (CSP) Bypass

3. What measure is the most effective to prevent a SMB Relay attack:

Enforcing SMB Signing

Disabling the local admin shares for SMB

Using only SMBv3

Disabling NTLMv1

4. With asymmetric encryption

all communication participants use the same key pair

all communication participants use an individual key pair

the advantage is that it provides better performance compared to symmetric encryption

it does not matter for security how the private keys are exchanged between the individual participants

5. Which of the following statements is true about honeypots?

Anything going to a honeypot is likely a probe or attack

High-interaction honeypots can handle a lot more traffic as low interaction honeypots

Honeypots need to be easy to distinguish from real systems to prevent accidental usage

Logs of the honeypot should be only stored on the honeypot, to reduce the risk of exposing sensitive information

6. Which of the following tasks is not a hardening measure?

Deactivate or remove unnecessary software and services

Restrict access or deactivate unused interfaces

Allocate pre-authorized network addresses

Deactivate or remove unnecessary documents

7. Which of the following statements about keyloggers is wrong?

Keyloggers only work on legacy Windows versions like XP as driver signing is preventing the installation in later versions

Keyloggers can be deployed as a hardware implant

Keyloggers can be deployed as a software implant

Hardware keylogger can store keystrokes on a storage of the implant e.g. internal flash

8. What is MITRE ATT&CK for ICS?

a tool for hacking PLCs

is a knowledge base useful for describing the actions an adversary may take while operating within an ICS network

an IDS system which can detect most kind ICS adversaries

a yearly security conference with a focus on ICS environment