Exam CS0-003 topic 1 question 171 discussion

Passive scanning involves monitoring the network traffic without sending any packets to the target systems. This approach can identify potential vulnerabilities based on the traffic that is observed, without the risk of interfering with sensitive equipment or network operations.

C tends to be the more proactive approach because it fundamentally avoids putting stress on the systems in the first place, whereas D manages the timing of that potential impact but doesn't fully eliminate the risk.

I say C over B. While preserving the state of PLC ladder logic is important, this step alone does not prevent potential harm from active scans. It’s more of a precautionary measure rather than a scanning strategy.

B. Preserving the state of PLC ladder logic prior to scanning When assessing the security of an Operational Technology (OT) network that includes fragile and legacy equipment, it is crucial to preserve the state of Programmable Logic Controller (PLC) ladder logic prior to scanning. This ensures that the scanning process does not inadvertently disrupt or modify the logic that controls critical manufacturing processes.