Specialized Technology

Question 1

A security policy set by a company that allows employees to use their personal
smartphones, laptops, and tablets for work and connection to the corporate
network

Answer 1

Bring Your Own Device (BYOD)

Question 2

The process and supporting technologies for tracking, controlling, and securing
the organization’s mobile infrastructure

Answer 2

Mobile Device Management (MDM)

Question 3

A mobile device management suite with broader capabilities, such as identity and
application management

Answer 3

Enterprise Mobility Management (EMM)

Question 4

A group of objects (electronic or not) that are connected to the wider Internet by using
embedded electronic components

Answer 4

IoT Vulnerabilities

Question 5

A computer system that is designed to perform a specific, dedicated function

Answer 5

Embedded System Vulnerabilities

Question 6

A type of computer designed for deployment in an industrial or outdoor setting
that can automate and monitor mechanical systems

Answer 6

Programmable Logic Controller (PLC)

Question 7

A processor that integrates the platform functionality of multiple logical
controllers onto a single chip

Answer 7

System-on-Chip (SoC)

Question 8

A type of OS that prioritizes deterministic execution of operations to ensure
consistent response for time-critical tasks

Answer 8

Real-Time Operating System (RTOS)

Question 9

A processor that can be programmed to perform a specific function by a customer
rather than at the time of manufacture

Answer 9

Field Programmable Gate Array (FPGA)

Question 10

A communications network designed to implement an industrial control system
rather than data networking

Answer 10

Operational Technology (OT)

Question 11

A network that manages embedded devices

Answer 11

Industrial Control Systems (ICS)

Question 12

Digital serial data communications used in operational technology networks to
link PLCs

Answer 12

Fieldbus

Question 13

Input and output controls on a PLC to allow a user to configure and monitor the
system

Answer 13

Human-Machine Interface (HMI)

Question 14

Software that aggregates and catalogs data from multiple sources within an
industrial control system

Answer 14

Data Historian

Question 15

A type of industrial control system that manages large-scale, multiple-site devices
and equipment spread over geographic region

Answer 15

Supervisory Control and Data Acquisition (SCADA)

Question 16

A communications protocol used in operational technology networks

Answer 16

Modbus

Question 17

Four key controls for mitigating vulnerabilities in specialized systems
o Establish administrative control over Operational Technology networks by
recruiting staff with relevant expertise
o Implement the minimum network links by disabling unnecessary links, services,
and protocols
o Develop and test a patch management program for Operational Technology
networks
o Perform regular audits of logical and physical access to systems to detect possible
vulnerabilities and intrusions

Answer 17

Mitigating Vulnerabilities

Question 18

Systems used for building automation and physical access security

Answer 18

Premise Systems

Question 19

Components and protocols that facilitate the centralized configuration and
monitoring of mechanical and electrical systems within offices and data centers
▪ Process and memory vulnerabilities in PLC
▪ Plaintext credentials or keys in application code
▪ Code injection via web user interface

Answer 19

Building Automation System (BAS)

Question 20

Components and protocols that facilitate the centralized configuration and
monitoring of security mechanisms within offices and data centers

Answer 20

Physical Access Control System (PACS)

Question 21

Vehicles connect numerous subsystems over a controller area network (CAN)

Answer 21

Vehicular Vulnerabilities

Question 22

A digital serial data communications network used within vehicles

Answer 22

Controller Area Network (CAN)