In Pittsburgh, Pennsylvania, a major steel manufacturer operates a production plant with numerous automated loops that regulate temperature, pressure, and conveyor speed. During an audit, ethical hacker Marcus Reed observes that these loops are coordinated by a centralized supervisory network that links multiple controllers across the facility. Based on this design, which OT system concept is being applied?

• A. Manual loop
• B. Open loop
• C. Closed loop
• D. Distributed Control System (DCS)

During a network security audit at Jefferson National Bank in Richmond, Virginia, ethical hacker Thomas Reed is tasked with identifying vulnerabilities in employee login processes on VLAN 20, which connects client services workstations to the customer account database server. He sets up a Wireshark instance on a monitoring workstation configured in mirror mode behind a managed switch to capture traffic. His goal is to detect unencrypted authentication credentials transmitted over HTTP during login sessions. Which Wireshark feature should Thomas use to isolate and analyze these credentials in real time, and how does it assist him?

• A. Use the " Monitoring the Specific Ports " to generate a traffic summary and identify HTTP packets
• B. Use the " Follow TCP Stream " to reconstruct and read HTTP session data
• C. Use the " Filtering by IP Address " to set a filter for HTTP traffic before capturing
• D. Use the " Display Filtering by Protocol " to isolate HTTP traffic and view packet details

A competing technology firm begins releasing products that closely mirror the design, pricing strategy, and feature roadmap of ApexDynamics Inc. An internal review reveals that detailed information about ApexDynamics ' s upcoming initiatives had been gradually collected through publicly available sources and external disclosures before product launch. Which footprinting-related threat does this scenario best represent?

• A. Information Leakage
• B. Social Engineering
• C. Business Loss
• D. Corporate Espionage

An authorized security assessment is performed on a public-sector services portal in Madison, Wisconsin.
After authenticating with a controlled test account, the assessor captures the authentication identifier issued by the application.
Under controlled lab conditions, she attempts to reuse the captured identifier from a separate machine connected through a different encrypted channel. Although the identifier remains valid and within its lifetime, the application rejects the request when presented from the alternate environment.
Analysis indicates that the server evaluates characteristics associated with the original secure exchange before allowing continued use of the issued identifier.
Which defensive mechanism most likely explains this behavior?

• A. Cryptographically binding authentication tokens to the TLS connection context
• B. Encrypting DNS resolution traffic using DNS over HTTPS
• C. Enforcing HTTP Strict Transport Security
• D. Applying IPsec protection at the network layer