How does CISA monitor compliance with CFATS?

By reviewing public social media posts from facility employees

Through unannounced inspections of covered facilities

By requiring facilities to submit monthly security reports

By relying solely on self-assessments submitted by facilities

Which of the following is a key element of the CFATS program?

Mandatory installation of surveillance cameras at all facility entrances

Public disclosure of all chemical inventories

Annual third-party audits of financial records

Submission of a Security Vulnerability Assessment (SVA) and a Site Security Plan (SSP)

A covered chemical facility has submitted its Site Security Plan (SSP) to DHS. The plan includes physical barriers, access controls, and cybersecurity measures. What is the most likely next step in the CFATS approval process?

DHS will review the SSP and may conduct a site inspection to verify the plan's accuracy before approving it.

DHS will issue a final determination of high-risk status based on the SSP content.

The facility must submit a new Top-Screen to reflect the security measures in the SSP.

The facility will receive immediate approval if the SSP includes all required RBPS elements.

What is the 'screening threshold quantity' (STQ) in the context of CFATS?

The quantity of a chemical that is considered safe for public exposure

The minimum amount of a chemical that, if possessed, requires the facility to submit an initial screening to CISA

The amount of a chemical that requires a hazardous waste permit

The maximum amount of a chemical that can be stored without a permit

What is the purpose of the Security Vulnerability Assessment (SVA) under CFATS?

To identify potential vulnerabilities in a facility's security that could be exploited by terrorists

To calculate the exact cost of implementing security measures

To verify compliance with environmental regulations

To provide a list of approved security vendors

EC-CouncilICS/SCADA Cybersecurity

Domain 5Objective 3

CFATS ICSSCADA Practice Questions (Page 3)

Part of the Standards and Regulations for Cybersecurity domain, which makes up ~13% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–10 in this domain), expect 1–2 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

8concepts

Questions 11–15

11foundation · easy
How does CISA monitor compliance with CFATS?
Select an answer first
12foundation · easy
Which of the following is a key element of the CFATS program?
Select an answer first
13application · medium
A covered chemical facility has submitted its Site Security Plan (SSP) to DHS. The plan includes physical barriers, access controls, and cybersecurity measures. What is the most likely next step in the CFATS approval process?
Select an answer first
14foundation · easy
What is the 'screening threshold quantity' (STQ) in the context of CFATS?
Select an answer first
15foundation · easy
What is the purpose of the Security Vulnerability Assessment (SVA) under CFATS?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ICSSCADA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ICSSCADA” is a trademark of its owner, used for identification only.