Exam CAS-005 topic 1 question 42 discussion

❌ Why the other options are incorrect: B. They lack x86-64 processors Many embedded systems use ARM or other architectures, but security upgrades don't necessarily require x86-64. So, this isn't the main reason. C. They lack EEPROM EEPROM (used for storing firmware) is not a primary limiting factor in most security upgrades. Many embedded systems have some form of non-volatile storage. D. They are not logic-bearing devices This would mean they don't process instructions, which isn't true — automation systems are logic-bearing by nature (they run firmware and software).

✅ A. They are constrained by available compute. 🔍 Explanation: Embedded facility automation systems — like those used in HVAC, lighting, access control, or SCADA — are typically designed with limited processing power, memory, and storage to reduce cost and power consumption. This lack of resources often makes it difficult or even impossible to install traditional security software or implement complex cryptographic protections.