ISC2 Certified Secure Software Lifecycle Professional (CSSLP) Practice Question

A car manufacturer is integrating a new Industrial IoT-enabled robotic welding cell that will exchange telemetry with the corporate MES (Manufacturing Execution System) over the plant's Ethernet network. To ensure personnel safety and maintain continuous production even if ransomware compromises office IT systems, which architectural safeguard should be given highest priority during design?

Require multi-factor authentication for all plant visitors before granting physical access to the shop floor.
Implement strict network segmentation that places the robotic cell in a protected control zone with firewalled conduits to the corporate network.
Enable Transport Layer Security (TLS) on the web interface of the human-machine interface (HMI) consoles used by operators.
Deploy endpoint Data Loss Prevention (DLP) agents on engineering workstations connected to the robots.

Report Issue

Answer Description

In industrial control system (ICS) and IIoT environments, loss of availability or manipulation of control traffic can immediately endanger safety and disrupt production. The most effective way to prevent malware that enters the corporate IT network from reaching safety-critical robots is to place the operational technology (OT) components in a protected control zone that is physically and logically segmented from the enterprise (IT) zone. Traffic between zones should traverse well-defined conduits guarded by industrial firewalls and unidirectional gateways, enabling only the minimum required protocols and enforcing strict access controls. While TLS on the HMI, DLP on workstations, or MFA for visitors all add value, none of them alone can stop lateral movement of malware into the control network or guarantee the high availability demanded by industrial welding operations. Proper network segmentation is therefore the paramount architectural control.

Ask Bash

Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.