Which action reduces attack surface on OT devices?

Which action reduces attack surface on OT devices?

• A. To reduce attack surface and limit potential exploitation.
• B. To improve performance by enabling more services.
• C. To meet IT standards only.
• D. To increase communication channels.

Answer: (A)

Reducing the attack surface means cutting down the ways someone could compromise an OT device. In practice, this is done by disabling unnecessary services, closing unused ports, limiting network exposure, enforcing least-privilege access, and keeping software patched. When you minimize exposed functionality, you shrink potential entry points and weaknesses, making exploitation harder. The best choice reflects this idea: reduce the attack surface to limit potential exploitation. Enabling more services would widen the attack surface, meeting IT standards alone doesn’t address OT-specific risks, and adding more communication channels would increase exposure rather than reduce it.

Reducing the attack surface means cutting down the ways someone could compromise an OT device. In practice, this is done by disabling unnecessary services, closing unused ports, limiting network exposure, enforcing least-privilege access, and keeping software patched. When you minimize exposed functionality, you shrink potential entry points and weaknesses, making exploitation harder. The best choice reflects this idea: reduce the attack surface to limit potential exploitation. Enabling more services would widen the attack surface, meeting IT standards alone doesn’t address OT-specific risks, and adding more communication channels would increase exposure rather than reduce it.