Data Diode ICSSCADA Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A pharmaceutical company must share batch production records with a regulatory agency for audit. The agency's system is on a network that has been compromised in the past. The company wants to ensure that malware from the agency's network cannot infect the production network. Which security control provides the strongest guarantee?

   • AA data diode that allows the production network to send records to the agency's system but prevents any return traffic.
   • BA VPN with strong encryption and endpoint authentication.
   • CA firewall that blocks all inbound traffic from the agency's network.
   • DAn intrusion prevention system (IPS) that inspects all traffic from the agency.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A utility is planning to deploy data diodes to send metering data from multiple remote sites to a central collection point. Each site has different data rates and protocols. The central collection point needs to receive data from all sites. What is the most important consideration when designing the deployment?

   • AUse the same data diode model for all sites to simplify maintenance
   • BPlace all data diodes in a single location to reduce cost
   • CEnsure that each data diode is sized for the maximum data rate of its site and that the central collection point can handle the aggregate throughput
   • DUse a firewall instead of a data diode to reduce complexity
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which statement best describes the fundamental characteristic of a data diode?

   • AIt is a firewall rule that blocks inbound traffic but allows outbound traffic
   • BIt is a software-based solution that can be configured to allow bidirectional traffic when needed
   • CIt is a hardware device that physically enforces one-way data transfer, making reverse communication impossible
   • DIt is a protocol converter that translates between different ICS protocols while allowing acknowledgments
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which of the following is a typical use case for a data diode in an industrial control system?

   • AProviding a secure VPN connection for remote access to the HMI
   • BAllowing a vendor to remotely troubleshoot a malfunctioning RTU
   • CSending real-time process values from a SCADA system to a historian database in the corporate network
   • DEnabling operators to send control commands to field devices from a central control room
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the primary function of a data diode in a network security context?

   • ATo provide a secure tunnel for remote administration of industrial control systems
   • BTo allow data to flow in both directions but with encryption applied to all traffic
   • CTo filter and block malicious traffic while allowing legitimate bidirectional communication
   • DTo enable data to flow in only one direction, preventing any return traffic
   Reveal Solution Discussion Select an answer first