Advantages and Disadvantages of Air Gap Bridging ICSSCADA Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A railway signaling system is air-gapped. The vendor needs to send a firmware update. The security team wants to verify the integrity of the update before it is applied. Which process should they follow?

   • AAsk the vendor to mail a CD without any verification.
   • BHave the vendor email the update directly to an OT network user.
   • CConnect the OT network to the vendor's FTP server to download the update.
   • DDownload the update on an internet-connected workstation, verify its cryptographic hash, then transfer it via USB to the OT network.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A manufacturing plant has an air-gapped OT network. The plant needs to receive daily production schedules from the ERP system. The schedules are generated in the corporate IT network. Which method would allow the transfer while minimizing the risk of introducing malware?

   • AHave the ERP system send the schedule via email to an OT network user.
   • BTransfer the schedule file to a USB drive, scan it with updated antivirus on a separate workstation, and then manually load it onto the OT network.
   • CUse a wireless bridge to connect the IT and OT networks.
   • DSet up a scheduled FTP transfer from the IT network to the OT network.
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A defense contractor has an air-gapped network for weapons systems. To streamline maintenance, they are considering allowing a vendor to connect a laptop directly to the OT network for diagnostics. What is the most critical security risk of this action?

   • AThe vendor will be unable to access the internet for troubleshooting.
   • BThe OT network will become slower due to the laptop's presence.
   • CThe vendor laptop may be infected with malware that could spread to the OT network.
   • DThe vendor may accidentally change the IP address of the laptop.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   How does an air gap reduce the attack surface of an ICS/SCADA system?

   • ABy eliminating the network path that external attackers could use to reach the control system.
   • BBy requiring multi-factor authentication for all users accessing the control system.
   • CBy patching all known vulnerabilities in the control system software.
   • DBy encrypting all data transmitted between the control system and external networks.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A water treatment facility maintains an air-gapped SCADA network for its PLCs. The engineering team needs to apply a new control logic update that was developed on a workstation in the corporate IT network. The facility has a strict policy that no direct network connection may be established between the two networks. Which approach should the team use to transfer the update?

   • AConfigure a firewall rule to allow the update file to pass from the IT network to the SCADA network on a specific port.
   • BPlace the update on a shared network drive accessible from both networks.
   • CSend the update via email to a user with access to the SCADA network.
   • DCopy the update to a USB drive, scan it on an isolated workstation, and then manually carry it to the SCADA network.
   Reveal Solution Discussion Select an answer first