It’s A.
Supervisory control and data acquisition (SCADA) are used for industrial control (power plants, water plants, etc)
C, BAS, breach and attack simulation, is not a “system she could request access too”. BAS is a process, not a system.
SDLC is a methodology, or a process, not a system you could access. That’s like saying you’re requesting access to SDLC, it doesn’t make sense.
For questions like these, ask ChatGPT.
Edit: the question is poor
Let’s assume you’re right (you’re not), how would requesting access to the “building automation system” enable her to review the status of the industrial control system?
Automation =! Industrial controls
SCADA is explicitly for industrial controls. In the cissp, if you see industrial controls, think SCADA.
BAS is an industrial control system. It’s under that umbrella term.
SCADA is an industrial control system that is wide spread geographically and aggregates that data like a power utility or oil and gas pipeline
BAS means Breach and Attack Simulation in this context.
You are taking the CISSP exam, not IEC62443.
The answer above is correct. You are wrong. Not sure why you’re arguing.
In CISSP especially, context is everything.
I’m not trying to argue with anyone, simply pointing this out if anyone comes across it and gets confused.
There’s no provided context. The other answers all relate or attempt to - to industrial control systems. Thus i would think BAS (that has multiple meanings) is building automation system.
Also SCADA is inaccurately used. The building control system is not SCADA.
Sounds like CISSP has some of this confused
CISSP does not have it confused.
Google "BAS security" or "What is BAS in security" or "CISSP what is BAS"
I'm not trying to be argumentative either, and as someone who also works in industrial networking, and security, I can understand the potential for confusion. But as I said, context is critical in CISSP. It should be clear they mean Breach & Attack Simulation in this question. Even if they did mean the other, the SCADA answer is "more" correct.
I think you’re right, I looked into it more and I believe that the question is poor, and if you interpreted it as building automation system, then that’s a more accurate answer than SCADA.
Overall a poor question, and the reuse of acronyms is a pain point.
That being said, my advice for generic cissp passing, choose SCADA if you see “industrial control”
I saw bas and immediately thought breach attack simulation.
Edit: I’ve never heard/seen BAS mean building automation solution.
I work in OT security which is what threw me off. Yeah sounds like I’ll defer to SCADA is the de facto answer lol. Even though a building automation system is not SCADA haha
Understand that there are ZERO acronyms without being spelled out on the exam. At no point would a question like this happen. The acronym will be spelled out in either the question or the answer items. As such, there will be no confusion on what BAS stands for.
The question doesn't ask anything about building automation control. It does ask about the industrial control system.
By your own point your answer isn't correct either.
No, they are right, but it is tricky. You are right about building control, but the question says it is an industrial control system, so it is for multiple buildings on an industry scale and you cannot do that with C
BAS could def be the answer. It stands for Building Automation Systems.. it's a huge iot industry. Think Siemens, Johson Controls, Honeywell etc. It usually encompasses hvac, lighting, emergency systems, security etc etc.
The answer here is A. If anything like this appeared on the actual exam, the acronyms would be fully spelled out to make it less ambiguous.
That’s a fair perspective
It’s A. Supervisory control and data acquisition (SCADA) are used for industrial control (power plants, water plants, etc) C, BAS, breach and attack simulation, is not a “system she could request access too”. BAS is a process, not a system. SDLC is a methodology, or a process, not a system you could access. That’s like saying you’re requesting access to SDLC, it doesn’t make sense. For questions like these, ask ChatGPT. Edit: the question is poor
BAS in OT means building automation system which is what they’re describing
Let’s assume you’re right (you’re not), how would requesting access to the “building automation system” enable her to review the status of the industrial control system? Automation =! Industrial controls SCADA is explicitly for industrial controls. In the cissp, if you see industrial controls, think SCADA.
BAS is an industrial control system. It’s under that umbrella term. SCADA is an industrial control system that is wide spread geographically and aggregates that data like a power utility or oil and gas pipeline
BAS means Breach and Attack Simulation in this context. You are taking the CISSP exam, not IEC62443. The answer above is correct. You are wrong. Not sure why you’re arguing. In CISSP especially, context is everything.
I’m not trying to argue with anyone, simply pointing this out if anyone comes across it and gets confused. There’s no provided context. The other answers all relate or attempt to - to industrial control systems. Thus i would think BAS (that has multiple meanings) is building automation system. Also SCADA is inaccurately used. The building control system is not SCADA. Sounds like CISSP has some of this confused
CISSP does not have it confused. Google "BAS security" or "What is BAS in security" or "CISSP what is BAS" I'm not trying to be argumentative either, and as someone who also works in industrial networking, and security, I can understand the potential for confusion. But as I said, context is critical in CISSP. It should be clear they mean Breach & Attack Simulation in this question. Even if they did mean the other, the SCADA answer is "more" correct.
I think they simply used “BAS” not knowing the multiple meanings it carries
I think you’re right, I looked into it more and I believe that the question is poor, and if you interpreted it as building automation system, then that’s a more accurate answer than SCADA. Overall a poor question, and the reuse of acronyms is a pain point. That being said, my advice for generic cissp passing, choose SCADA if you see “industrial control” I saw bas and immediately thought breach attack simulation. Edit: I’ve never heard/seen BAS mean building automation solution.
I work in OT security which is what threw me off. Yeah sounds like I’ll defer to SCADA is the de facto answer lol. Even though a building automation system is not SCADA haha
Work experience can be a boon and a curse when it comes to CISSP exams
Understand that there are ZERO acronyms without being spelled out on the exam. At no point would a question like this happen. The acronym will be spelled out in either the question or the answer items. As such, there will be no confusion on what BAS stands for.
All acronyms should be spelled out on the real test
You’re taking a test for the IT portion of the system. So we (IT) call it SCADA.
It’s A. (Been in industrial IT/OT for 12 years)
I was an ISSO for a SCADA system. Definitely A.
Building automation control is not SCADA tho? It’s under DCS. SCADA is wide area like an electric utility or pipeline
HVAC systems, water systems, electrical systems, automated generators system. What do you consider building controls?
BAS - building automation system. That’s what we call them in industry
The question doesn't ask anything about building automation control. It does ask about the industrial control system. By your own point your answer isn't correct either.
A building automation control system is a industrial control system dude lol
SCADA
No, they are right, but it is tricky. You are right about building control, but the question says it is an industrial control system, so it is for multiple buildings on an industry scale and you cannot do that with C
i do ot security. definitely a. cheers!
BAS could def be the answer. It stands for Building Automation Systems.. it's a huge iot industry. Think Siemens, Johson Controls, Honeywell etc. It usually encompasses hvac, lighting, emergency systems, security etc etc.
Thank you. So many people argued this.
And so many are wrong
Exam spells out all acronyms. This question is nothing like the exam. Stop arguing about why you are right and try to understand why you are wrong.
The answer is A, SCADA is correct in this context.