At a manufacturer, one crafted packet abuses a parser in an industrial protocol and crashes the listener on a plant controller. Which attack class is this?
Select an answer to reveal the explanation.
Short Explanation
A rigged envelope destroys the mail sorter without talking anyone into it. You classify the crafted packet as a protocol-based attack. The trap is calling the crash social engineering, a browser script, or a certificate date.
Full Explanation
The right selection is "A protocol-based attack, a crafted packet that abuses the industrial parser and crashes it". The packet is built to abuse how the protocol parser reads a message, and the listener crashes. That is protocol abuse, even though the visible effect is loss of the listener. The statement "Social engineering of a plant operator who is talked into actions that crash the controller" requires a person who is persuaded, and nobody was talked into this crash. The statement "Cross-site scripting that runs in a browser against the manufacturer's public website" requires a browser to execute script from a web page, and the event is an industrial-protocol packet on a controller. The statement "Expiry of a certificate on the controller, a date problem with no crafted packet involved" is a validity date, and the stem describes packet content the parser could not handle safely. Exam caveat: the crash is a loss of availability, and the class still follows the method, a malformed protocol message. Operational check: keep the crafted packet and compare its structure with a normal message for that industrial protocol.