QuestionQ105
Information Security Threats and AttacksApexTech, a cybersecurity consultancy, was engaged by a large energy conglomerate to evaluate the resilience of its energy-grid control systems. The conglomerate is moving from traditional systems to a more interconnected smart grid. ApexTech recommended a penetration test to uncover possible vulnerabilities in the new environment. The firm presented four methodologies it could use to assess the system’s vulnerabilities comprehensively.
The energy conglomerate must choose the approach that would be MOST informative and advantageous for identifying vulnerabilities within its transitioning infrastructure:
- A A double-blind test where both the energy company’s IT team and testers are unaware of the impending test.
- B An external test focusing only on the conglomerate’s externally facing assets and systems.
- C A targeted test where both the testers and IT team work collaboratively and are fully informed.
- D A blind penetration test where testers have no prior knowledge of the infrastructure.
Community Discussion