Which of the following is the reason why security engineers often cannot upgrade the security of embedded facility automation systems?

Embedded facility automation systems are often difficult to upgrade because they are constrained by

available compute. These systems typically have limited processing power, memory, and storage,

which restricts the ability to implement modern security measures, such as encryption, software

updates, or advanced security controls. Security engineers may be unable to apply patches or

updates without exceeding the system’s capacity. CASP+ discusses the challenges posed by resource-

constrained devices, particularly in embedded systems and IoT environments, where upgrading

security can be difficult due to hardware limitations.

Reference:

CASP+ CAS-004 Exam Objectives: Domain 3.0 – Enterprise Security Architecture (Embedded System

Security and Constraints)

CompTIA CASP+ Study Guide: Managing Security for Resource-Constrained Embedded Systems