Advantages and Disadvantages of Air Gap Bridging ICSSCADA Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A municipal transit authority operates an air-gapped signaling system. The vendor has released a critical security patch, but the patch requires an online license activation that must be performed over the internet. The authority's security policy strictly prohibits any network connection to the control network. Which action is most appropriate?

   • AHave the vendor's technician remotely access the control network via a VPN to perform the activation and patch installation.
   • BUse a USB drive to transfer the patch and then perform the activation by calling the vendor's support line and reading the activation code over the phone.
   • CContact the vendor to request an offline activation method or a license file that can be transferred via removable media.
   • DTemporarily connect the control network to the internet just long enough to activate the license and download the patch.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which of the following is a primary security advantage of using an air gap in an ICS/SCADA environment?

   • AIt prevents any malware from ever entering the control system.
   • BIt eliminates the need for all other security controls, such as antivirus and access control.
   • CIt allows for easier remote monitoring and control from corporate headquarters.
   • DIt reduces the attack surface by preventing direct network-based attacks from external networks.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A hospital's building management system (BMS) is air-gapped. The facility manager wants to connect it to the hospital's IT network for centralized monitoring. Which of the following is a potential security benefit of keeping the air gap?

   • AThe BMS will have faster data transfer to the IT network.
   • BThe BMS will require less physical security.
   • CThe BMS is protected from malware that might spread from the IT network.
   • DThe BMS will be easier to patch.
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A utility company is considering bridging its air-gapped SCADA network to improve business intelligence. The security team has identified that the main risk is the introduction of a bidirectional communication path. Which mitigation would be most effective in reducing this risk?

   • AEncrypt all traffic between the networks.
   • BImplement a unidirectional gateway that only allows data to flow from the SCADA network to the business network.
   • CUse a firewall with a strict allowlist of IP addresses.
   • DUse a VPN with strong authentication.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A power plant has an air-gapped DCS. The plant engineer needs to transfer a large historical data file to the corporate office for analysis. The file is too large for a standard USB drive. Which method would allow the transfer without bridging the air gap?

   • AUse a temporary wireless connection to transfer the file.
   • BSend the file via an FTP server on the corporate network.
   • CCompress the file and split it across multiple USB drives, then physically transport them.
   • DUpload the file to a cloud storage service from the OT network.
   Reveal Solution Discussion Select an answer first