A critical infrastructure operator has an air-gapped control system. They are under pressure to share real-time operational data with a regulatory body. The regulatory body requires a secure, auditable, and near-real-time data feed. Which solution best satisfies the requirement while minimizing the security impact on the air gap?

Send daily reports via encrypted email from an OT workstation.

Deploy a data diode to export data to a staging server that the regulator can access.

Allow the regulator to connect directly to the OT network via a VPN.

Set up a read-only SQL mirror from the OT database to the regulator's network.

A military base has an air-gapped network for classified operations. They need to receive unclassified intelligence updates from a sister base. Which of the following is an acceptable method to transfer the updates while maintaining the spirit of the air gap?

Send the updates over a secure satellite link.

Establish a dedicated fiber link between the two bases.

Use a wireless point-to-point link between the bases.

Use a courier to physically deliver an encrypted USB drive.

In the context of ICS/SCADA cybersecurity, what is an air gap?

A physical or logical separation that prevents any direct network connection between an industrial control system and external networks.

A backup power supply that keeps control systems running during an electrical outage.

A virtual LAN (VLAN) that separates the corporate network from the control network.

A firewall rule that blocks all inbound traffic from the internet to the industrial control system.

A pipeline control center has an air-gapped SCADA system. They need to receive weather forecast data from a public meteorological service to optimize pumping schedules. Which method would allow this data to enter the OT network with the least security risk?

Manually download the forecast to a USB drive, scan it, and transfer it to the OT network.

Have the weather service email the forecast to a generic OT mailbox.

Set up a wireless bridge between the corporate network and the OT network.

Establish a direct internet connection from the OT network to the weather service.

A mining company's OT network is air-gapped. The control system vendor requires remote access for troubleshooting, but the company has a strict no-remote-access policy. What is the most likely consequence of this policy?

The vendor will need to be on-site for troubleshooting, leading to longer resolution times.

The vendor will be able to update the system more easily.

The company will save money on travel expenses.

The OT network will be more vulnerable to internet attacks.

EC-CouncilICS/SCADA Cybersecurity

Domain 7Objective 1

Advantages and Disadvantages of Air Gap Bridging ICSSCADA Practice Questions (Page 3)

Part of the Bridging the Air Gap domain, which makes up ~8% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~4–6 in this domain), expect 1–2 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

6concepts

Questions 11–15

11expert · hard
A critical infrastructure operator has an air-gapped control system. They are under pressure to share real-time operational data with a regulatory body. The regulatory body requires a secure, auditable, and near-real-time data feed. Which solution best satisfies the requirement while minimizing the security impact on the air gap?
Select an answer first
12application · medium
A military base has an air-gapped network for classified operations. They need to receive unclassified intelligence updates from a sister base. Which of the following is an acceptable method to transfer the updates while maintaining the spirit of the air gap?
Select an answer first
13foundation · easy
In the context of ICS/SCADA cybersecurity, what is an air gap?
Select an answer first
14application · medium
A pipeline control center has an air-gapped SCADA system. They need to receive weather forecast data from a public meteorological service to optimize pumping schedules. Which method would allow this data to enter the OT network with the least security risk?
Select an answer first
15application · medium
A mining company's OT network is air-gapped. The control system vendor requires remote access for troubleshooting, but the company has a strict no-remote-access policy. What is the most likely consequence of this policy?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ICSSCADA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ICSSCADA” is a trademark of its owner, used for identification only.