A wastewater-process question is whether anyone used the jump host and then changed a pump setpoint through the industrial firewall. Which sources are useful?
Select an answer to reveal the explanation.
Short Explanation
OT questions need OT-adjacent cameras: the historian, the jump-host door, and the industrial firewall. Library Wi-Fi is a different building. 311 tickets and parks calendars will not show a setpoint write.
Full Explanation
Whether anyone used the jump host and then changed a pump setpoint through the industrial firewall is an OT access-and-change chain. Useful sources are historian records of setpoint writes, jump-host authentication, and the industrial firewall sessions from jump host toward controllers—not the public-library Wi-Fi controller. That triad reconstructs who authenticated, what path they took, and what process value changed for wastewater operations.
Relying only on the public-library Wi-Fi controller fails because staff guest SSIDs do not cover OT jump-host and PLC paths. Relying only on parks-department CMS logs for the recreation calendar documents website content scheduling, not pump setpoints. Relying only on municipal 311 ticket text fails because citizen complaints are not PLC write evidence and lack controller provenance.
Exam caveat: OT investigative chains need historian plus jump-host authentication plus industrial firewall; civic Wi-Fi, CMS, and 311 are frequent distractors.
Operational check: timeline jump-host logons, industrial firewall accepts into the PLC network, and historian setpoint audits for the same window; escalate if a match exists without an approved change ticket.