When considering a vendor-specific vulnerability in critical industrial control systems which of the following
techniques supports availability?

A.
Deploying identical application firewalls at the border

B.
Incorporating diversity into redundant design

C.
Enforcing application white lists on the support workstations

D.
Ensuring the systems’ anti-virus definitions are up-to-date

Explanation:
If you know there is a vulnerability that is specific to one vendor, you can improve availability by implementing
multiple systems that include at least one system from a different vendor and so is not affected by the
vulnerability.