SACA IIoT and Industrial Networking 5 — Questions and Answers
Question 1: In an IIoT deployment, what does the term 'digital twin' refer to?
- A redundant backup PLC mirroring the primary controller
- A virtual replica of a physical asset updated with real-time sensor data (Correct answer)
- A secondary SCADA server for disaster recovery
- A duplicate IP address scheme used in network segmentation
Correct answer: A virtual replica of a physical asset updated with real-time sensor data
A digital twin is a live virtual model of a physical asset or process, continuously synchronized with real-world data to enable simulation, monitoring, and predictive analytics.
Question 2: Which MQTT Quality of Service (QoS) level guarantees that a message is delivered exactly once, preventing duplicates?
- QoS 0 – At most once
- QoS 1 – At least once
- QoS 2 – Exactly once (Correct answer)
- QoS 3 – Confirmed delivery
Correct answer: QoS 2 – Exactly once
MQTT QoS 2 uses a four-step handshake (PUBLISH, PUBREC, PUBREL, PUBCOMP) to ensure exactly-once delivery, eliminating both loss and duplication.
Question 3: A cybersecurity engineer is hardening an IIoT network and implements unidirectional security gateways (data diodes) between the OT and IT zones. What is the primary benefit?
- Doubling the available network bandwidth
- Physically preventing data from flowing back into the OT network (Correct answer)
- Enabling remote firmware updates to field devices
- Providing NAT traversal for cloud connectivity
Correct answer: Physically preventing data from flowing back into the OT network
Data diodes enforce one-way data flow at the hardware level, making it physically impossible for malicious traffic to reach the OT network from the IT side.
Question 4: Which time synchronization protocol is commonly used in industrial networks to achieve sub-microsecond accuracy across Ethernet-connected automation devices?
- NTP (Network Time Protocol)
- SNTP (Simple NTP)
- IEEE 1588 Precision Time Protocol (PTP) (Correct answer)
- GPS pulse-per-second (PPS) only
Correct answer: IEEE 1588 Precision Time Protocol (PTP)
IEEE 1588 PTP uses hardware timestamping and a master-slave hierarchy to synchronize clocks across a network with sub-microsecond accuracy, meeting the demands of motion control and process automation.
Question 5: In an IIoT context, what does OEE (Overall Equipment Effectiveness) measure?
- The ratio of IT network uptime to total scheduled time
- The combined impact of availability, performance, and quality on manufacturing productivity (Correct answer)
- The energy efficiency rating of industrial motors
- The percentage of devices successfully enrolled in an MDM system
Correct answer: The combined impact of availability, performance, and quality on manufacturing productivity
OEE = Availability × Performance × Quality, and it quantifies how effectively a manufacturing operation uses its equipment compared to its full theoretical potential.
Question 6: When configuring industrial firewall rules between a DMZ historian and the plant floor network, which principle should guide the rule set?
- Default allow with logging for auditing purposes
- Deny all and permit only explicitly required traffic (least privilege) (Correct answer)
- Allow all historian polling traffic without restriction
- Mirror IT firewall rules exactly to reduce management overhead
Correct answer: Deny all and permit only explicitly required traffic (least privilege)
The principle of least privilege dictates that only specifically required communication flows are permitted, minimizing the attack surface between the historian DMZ and OT devices.
Question 7: Which industrial protocol natively supports the publish-subscribe model across an Ethernet network and is designed as a successor to traditional OPC DA for IIoT scalability?
- Modbus TCP
- EtherNet/IP with CIP
- OPC UA PubSub (Correct answer)
- DNP3 over TCP
Correct answer: OPC UA PubSub
OPC UA PubSub extends the OPC UA information model with a broker-based publish-subscribe transport (MQTT or AMQP), enabling scalable, loosely coupled IIoT data distribution.
SACA IIoT and Industrial Networking 5
In an IIoT deployment, what does the term 'digital twin' refer to?