Advantages and Disadvantages of Air Gap Bridging ICSSCADA Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A petrochemical facility uses an air gap to protect its safety systems. Which of the following is a valid reason to maintain the air gap despite the operational challenges?

   • AIt eliminates the need for physical security measures.
   • BIt prevents remote attackers from directly accessing the safety systems over the network.
   • CIt allows for faster data transfer between the safety systems and the corporate network.
   • DIt makes it easier to share data with external partners.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A nuclear facility's safety system is air-gapped, but the regulator now requires real-time monitoring of certain safety parameters. The facility's engineering team proposes using a wireless sensor network to transmit the parameters to a monitoring station outside the protected area. The security team must evaluate this. Which factor is most important to consider when deciding whether to approve this wireless bridge?

   • AWhether the monitoring station is located within the facility's physical perimeter, so that the wireless signal does not leave the controlled area.
   • BWhether the wireless transmission is encrypted and uses a frequency-hopping spread spectrum to prevent jamming and interception.
   • CWhether the safety parameters are considered sensitive enough to require protection, because if they are not, the air gap can be safely bridged.
   • DWhether the wireless link is one-way (transmit-only) and cannot receive any external signals, ensuring that the safety system remains isolated from inbound threats.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A chemical plant uses an air-gapped control system. The plant manager wants to allow a vendor to perform remote diagnostics over a temporary VPN connection. The security team is concerned about the risk. What is the best compromise that allows the vendor to work while minimizing the risk?

   • ASend the vendor a laptop with pre-installed remote access software to use on the OT network.
   • BPermanently open the VPN connection for convenience.
   • CProvide the vendor with a direct dial-up modem connection.
   • DAllow the VPN connection only during scheduled maintenance windows and require multi-factor authentication.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the main trade-off when deciding to bridge an air gap in an ICS/SCADA environment?

   • ASimpler maintenance versus more complex compliance requirements.
   • BLower cost versus higher performance.
   • CIncreased connectivity and data sharing versus increased risk of cyberattacks.
   • DIncreased security versus reduced operational efficiency.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A manufacturing plant has an air-gapped OT network. Management wants to enable real-time production dashboards for the corporate office. The security team is evaluating options: (1) physically transfer reports via USB, (2) establish a one-way data diode from OT to IT, or (3) allow a read-only SQL replication from the OT database to the IT network. Which option best balances the need for timely data with security?

   • AInstall a VPN concentrator on the OT network for secure remote access.
   • BContinue with manual USB transfers of daily reports.
   • CUse a one-way data diode to send production data to the IT network.
   • DConfigure SQL replication from the OT database to the IT network.
   Reveal Solution Discussion Select an answer first