Exam CISSP topic 1 question 188 discussion

The very fact of testing/scanning ICS devices could cause them problems. Also, they are not always hard to get to so D does not apply all the time.

D is a common fact C is a weakness

The PRIMARY consideration when testing industrial control systems (ICS) for security weaknesses is: C. ICS are often sensitive to unexpected traffic. Industrial control systems are designed to manage and control critical infrastructure and industrial processes. They are highly sensitive to unexpected or unauthorized traffic because any disruptions or unauthorized access can have serious consequences, including physical damage or safety risks. Therefore, security testing of ICS should prioritize ensuring that unexpected traffic or unauthorized access is detected and mitigated to protect the integrity and availability of these systems.

The primary consideration when testing industrial control systems (ICS) for security weaknesses, from a CISSP perspective, is that ICS are often sensitive to unexpected traffic. Therefore, option C is the correct answer. ICS are often designed to function within a specific set of parameters and can be easily disrupted by unexpected network traffic or activity. As such, it is critical to test and analyze ICS security measures to identify and address potential vulnerabilities before they can be exploited by malicious actors.

The primary consideration when testing industrial control systems (ICS) for security weaknesses is that ICS are often sensitive to unexpected traffic. Industrial control systems are used to control and monitor critical infrastructure and industrial processes, and disruptions to their operation can have serious consequences. Therefore, it is important to carefully consider the potential impact of any security testing on the operation of the ICS and to ensure that the testing does not disrupt or compromise the system.

C. https://www.cisa.gov › recommended_practices Some ICS protocol implementations are vulnerable to packets that are malformed or contain illegal or otherwise unexpected field values.

C is the best answer. ICS systems can sometimes be internet facing so D is wrong.

" ICS are often isolated and difficult to access" is not a weakness

C is the correct

question asks in the context of sec testing for sec weaknesses. in this context I'd go with C

Physical location/access are usually the primary concerns with ICS, SCADA systems

Agree with D

Physical location/access are usually the primary concerns with ICS, SCADA systems