How does an electrical data diode enforce one-way data flow?

By using a diode circuit that only allows current to pass in one direction

By using a resistor to limit the signal strength so that only the intended receiver can decode it

By using a transformer to isolate the two networks and block all signals

By using a capacitor to store data and release it only on the receiving side

A team is building a custom data diode using two network cards and a fiber-optic link. They want to ensure that the receive side cannot send any data back. What is the most important design element?

Remove the transmitter from the receive-side network card

Use a switch between the two cards to filter traffic

Configure the receive-side card to disable its IP stack

Use a crossover cable between the two cards

A security engineer is explaining to management why a data diode is more secure than a firewall for protecting a SCADA network. Which physical characteristic should the engineer highlight?

The data diode is made of fiber optic cable that is immune to electromagnetic interference.

The data diode has a built-in firewall that filters all incoming packets.

The data diode uses a special encryption chip that prevents all malware.

The transmit and receive paths are physically separated, so data can only travel in one direction.

A water treatment plant wants to send historical process data from its OT network to a cloud-based analytics platform. The OT network is air-gapped and the security policy forbids any inbound connections. The data is exported as CSV files every hour. What is the most suitable deployment?

Install a data diode between the OT network and a staging server, then use a separate approved mechanism to transfer files to the cloud

Use a firewall with a rule that only allows outbound FTP from the OT network

Place a data diode with the send side on the cloud side and the receive side on the OT network

Connect the OT network directly to the cloud using a VPN and push the CSV files

An oil refinery wants to send historian data to a corporate data lake for analytics. The data lake team requires the ability to query the historian directly for on-demand data. The security team mandates that the OT network must be physically isolated from the corporate network. Which deployment best satisfies both requirements?

Deploy a data diode from the historian to a read-only replica in the corporate zone, and have the data lake query the replica.

Use a VPN to allow the data lake to connect directly to the historian for queries.

Send daily CSV exports via email to the data lake team.

Install a firewall with a rule that allows the data lake to read from the historian but blocks writes.

EC-CouncilICS/SCADA Cybersecurity

Domain 7Objective 3

Data Diode ICSSCADA Practice Questions (Page 1)

Part of the Bridging the Air Gap domain, which makes up ~8% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~4–6 in this domain), expect 1–2 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

7concepts

Questions 1–5

1foundation · easy
How does an electrical data diode enforce one-way data flow?
Select an answer first
2application · medium
A team is building a custom data diode using two network cards and a fiber-optic link. They want to ensure that the receive side cannot send any data back. What is the most important design element?
Select an answer first
3application · easy
A security engineer is explaining to management why a data diode is more secure than a firewall for protecting a SCADA network. Which physical characteristic should the engineer highlight?
Select an answer first
4application · medium
A water treatment plant wants to send historical process data from its OT network to a cloud-based analytics platform. The OT network is air-gapped and the security policy forbids any inbound connections. The data is exported as CSV files every hour. What is the most suitable deployment?
Select an answer first
5application · medium
An oil refinery wants to send historian data to a corporate data lake for analytics. The data lake team requires the ability to query the historian directly for on-demand data. The security team mandates that the OT network must be physically isolated from the corporate network. Which deployment best satisfies both requirements?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ICSSCADA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ICSSCADA” is a trademark of its owner, used for identification only.