Which of the following is the reason why security engineers often cannot upgrade the security of embedded facility automation systems?

Embedded facility automation systems are often difficult to upgrade because they are constrained by available compute. These systems typically have limited processing power, memory, and storage, which restricts the ability to implement modern security measures, such as encryption, software updates, or advanced security controls. Security engineers may be unable to apply patches or updates without exceeding the system’s capacity. CASP+ discusses the challenges posed by resource- constrained devices, particularly in embedded systems and IoT environments, where upgrading security can be difficult due to hardware limitations.
Reference: CASP+ CAS-004 Exam Objectives: Domain 3.0 – Enterprise Security Architecture (Embedded System Security and Constraints) CompTIA CASP+ Study Guide: Managing Security for Resource-Constrained Embedded Systems