CompTIA CASP+ (CAS-004) — Question 437

Which of the following is the reason security engineers in the power industry include mechanisms to control power generation equipment via air-gapped and other offline methods?

Answer options

• A. The ability of some malicious code to maneuver and trigger repeated damaging failures
• B. The capability of ICS control to be centrally managed and logged
• C. The brittleness of electrical relays subject to repeated power cycles over a short period of time
• D. The requirements to maintain administrative systems in the event of a power outage

Correct answer: A

Explanation

The correct answer, A, highlights the risk of malicious software that can exploit vulnerabilities to create ongoing failures. Options B and C discuss management and hardware issues, respectively, while D focuses on administrative continuity during outages, which are not the primary concern addressed by air-gapped methods.