Ethical Hacking Essentials Practice Test

What common practice exposes devices and networks to OT attacks?

1. Regular software updates

2. Using default factory-set passwords

3. Network segmentation

4. Two-factor authentication

The correct answer is: Using default factory-set passwords

Using default factory-set passwords is a significant security vulnerability that can expose devices and networks to operational technology (OT) attacks. Most devices come with standardized usernames and passwords that are well-documented and frequently shared among users, making it easy for attackers to gain unauthorized access if these credentials are not changed. When default credentials are not altered, malicious actors can exploit this weakness to infiltrate systems and devices, leading to potential control over critical infrastructure and sensitive data. This practice undermines the security posture of an organization, making it more susceptible to a myriad of cyber threats. In contrast, implementing regular software updates helps protect against known vulnerabilities, network segmentation limits access to certain parts of the network to enhance security, and two-factor authentication adds an extra layer of security, making it significantly harder for attackers to breach systems. Each of these practices contributes to strengthening defenses against OT attacks, unlike the use of factory-set passwords, which can lead to severe security risks.