Câu 5: GICSP: Global Industrial Cyber Security Professional

An attacker has a goal of obtaining information stored in an ICS. Why might the attacker focus his efforts on the operating system rather than the ICS application?

1. A. Organizations generally do not define a role or responsibility for dealing with operating systems, leaving them neglected and vulnerable
2. B. The operating system will have fewer vulnerabilities than the ICS application
3. C. The ICS is more likely to have vendor-provided security hardening guidance than the operating system will
4. D. Control of the operating system offers access to applications running on it — đáp án hiện tại