Exam PT1-002 topic 1 question 4 discussion

hi, did you write PTO-002 ? Is there a difference ?

PLC is a programmable logic controller. These are essentially maleable devices in that they can be controlled/manipulated/coded/programed to do whatever you need them to do for a business. They most likely lack ability to self-regulate/correct. This usually is the role of a security/network engineer. If one is able to send code to one of these devices, more likely than not, it will be accepted unless compensating controls have been put in place by an admin. this is my best guess. C makes the most sense to me for these reasons.

The correct answer is C because it is most likely that the controllers will not validate the origin of commands. This means that the controllers may not be able to detect malicious injections of code/commands. The other options are not as likely to be valid assumptions. Option A is not valid because PLCs might act upon commands injected over the network. Option B is not valid because it is possible that supervisors and controllers may not be on a separate virtual network. Option D is not valid because it is not likely that the supervisory systems will detect a malicious injection of code/commands.