Skip to content
AI Security

Interview question · Network Security & Protocols

How is securing an industrial control system different from securing IT, and how would you protect a plant you cannot patch for a year?

In a plant, availability and physical safety outrank confidentiality, and the controllers may be older than the security team. The scored answer adapts IT habits instead of copying them.

mediumNewPreparation tags: Microsoft, Cisco, Palo Alto NetworksUpdated Nov 2026

In a plant, availability and physical safety outrank confidentiality, and the controllers may be older than the security team. The scored answer adapts IT habits instead of copying them.

Make your first attempt

What would you say before reading the answer?

  1. 01 State the assumptions your answer depends on.
  2. 02 Explain the mechanism and choose a control.
  3. 03 Name a condition that would change your decision.

The worked answer includes an approach, scoring criteria and follow-up questions. Compare the reasoning with your own.

10 answers per topic instead of 5, plus saved progress and bookmarks · costs nothingor unlock all 529 remaining answers · $25

Every worked answer in all 17 topics, every lesson in every course, the full concept curriculum, the complete practice-test bank, and the downloadable security field guides.

6 months · One payment · No auto-renewal

What if · the follow-ups in this answer

The answer works through 4 follow-ups like an interviewer would

A water utility finds that an HMI at a pumping station is reachable from the internet through a remote-desktop tool a contractor installed years ago. The controller behind it runs firmware with known vulnerabilities and cannot be updated until a planned shutdown in nine months.

  1. What do you do today?
  2. How does the contractor do their job now?
  3. How do you manage the nine months until the firmware update?
  4. How do you summarise OT security?

Each rung has a nudge, a model answer, the principle that carries over and the weak answer to avoid. Premium opens every answer and ladder.

UP NEXT ON YOUR JOURNEY
Next in this trackHow do Bluetooth pairing, NFC payments and keyless car entry get attacked, and why does a relay defeat encryption?Next in this trackYour network is 'IPv4 only', but every laptop and server has IPv6 enabled. What security gaps does that create, and how do you close them?Next in this trackHow does a subdomain takeover happen through dangling DNS, and how would you prevent and detect it across hundreds of cloud resources?
DISCUSSION · 0

No comments yet. Share a correction or a different way to answer it.