問題文
A manufacturer finds that an attacker reached its plant control network by first compromising a supplier's remote maintenance connection. The plant network trusted anything arriving over that connection. What is the primary lesson for the design?
選択肢
- The connection's origin should not confer trust; the supplier's traffic needs the same restriction as any other source.
- The supplier should have been required to maintain its own security program with an independent audit, because the compromise originated on the supplier's side and a stronger supplier posture would have prevented the attacker from getting in.
- The maintenance connection should have used a stronger encryption algorithm, and the supplier's session could not have been read or hijacked in transit.
- The plant network should have been monitored more closely, so the movement from the maintenance connection would have raised an alert.