Advantages and Disadvantages of Air Gap Bridging ICSSCADA Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A pharmaceutical company's manufacturing execution system (MES) is air-gapped from the corporate network. The company is considering bridging the air gap to enable real-time production dashboards for management. Which security benefit would be lost if the air gap is bridged?

   • AThe ability to use a shared authentication system, such as Active Directory, across the enterprise.
   • BThe ability to automatically patch the MES from the vendor's update server.
   • CThe ability to isolate the MES from internet-based attacks, such as ransomware and remote exploitation.
   • DThe ability to monitor the MES with the corporate SIEM in real time.
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   A power utility's SOC wants to monitor the security logs of an air-gapped substation control network. The compliance team insists on maintaining the air gap to meet NERC CIP requirements. The SOC proposes installing a read-only collector on the control network that sends logs to the corporate SIEM via a one-way data diode. The plant manager worries this 'bridges' the air gap. Which statement best addresses the manager's concern?

   • AThe data diode is a software firewall rule that blocks inbound connections but allows outbound traffic, so it is equivalent to a standard firewall.
   • BThe air gap is already compromised because the SOC is collecting logs, so the utility should instead connect the control network directly to the SIEM.
   • CA one-way data diode is a unidirectional network device that physically prevents inbound traffic, so the control network remains isolated from external initiation while still allowing outbound log transfer.
   • DSince the logs are read-only, the air gap is not actually bridged because no data enters the control network.
   Reveal Solution Discussion Select an answer first
4. 33expert · hard

   A nuclear power plant's safety system is air-gapped, but the plant's management wants to implement a predictive-maintenance program that requires vibration data from the safety system's sensors to be sent to an external analytics vendor. The security team must evaluate the risk. Which factor is most important in deciding whether to bridge the air gap?

   • AWhether the data transfer can be implemented as a one-way flow, using a data diode, so that no inbound traffic can reach the safety system.
   • BWhether the external vendor has a strong security certification, such as ISO 27001.
   • CWhether the vibration data is considered sensitive or proprietary information.
   • DWhether the predictive-maintenance program will provide a significant cost savings to the plant.
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A chemical plant's safety instrumented system (SIS) is air-gapped. The plant's IT department wants to connect the SIS to the corporate network for easier monitoring. The plant manager is concerned about losing the security benefits of the air gap. Which benefit is most directly lost if the SIS is connected to the corporate network?

   • AThe SIS is protected from malware that may be present on the corporate network, such as ransomware or worms.
   • BThe SIS can use a shared authentication system, such as Active Directory, for centralized access control.
   • CThe SIS can be patched more easily because it is isolated from the vendor's update server.
   • DThe SIS can send real-time alerts to the corporate SIEM for security monitoring.
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   What does 'bridging the air gap' mean in ICS/SCADA cybersecurity?

   • AEstablishing a method to transfer data across the isolation boundary, such as using removable media.
   • BCreating a physical gap between the control system and the network to improve security.
   • CEncrypting all data within the control network to prevent eavesdropping.
   • DUsing a firewall to filter traffic between the control network and the internet.
   Reveal Solution Discussion Select an answer first