Guard ICSSCADA Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   How can network segmentation be used to implement an air gap?

   • ABy placing the ICS network in a separate VLAN with no route to other networks
   • BBy using a VPN to connect the ICS network to the corporate network
   • CBy using a proxy server to filter all traffic between networks
   • DBy installing a firewall that allows only HTTP traffic to the ICS network
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A hospital's building management system (BMS) is air-gapped. The HVAC vendor requires remote access for troubleshooting. The hospital's security policy prohibits any direct remote access to the BMS. The vendor threatens to void the maintenance contract if remote access is not provided. What is the best compromise?

   • AProvide the vendor with a jump host that logs all sessions and requires approval for each access.
   • BSet up a one-way data diode that allows the vendor to send diagnostic commands but not receive data.
   • CRequire the vendor to be on-site for all troubleshooting.
   • DAllow the vendor to use a VPN with multi-factor authentication directly into the BMS network.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A food processing plant maintains an air-gapped SCADA network. To strengthen the air gap, management wants to implement a control that detects unauthorized wireless devices. Which control is most appropriate?

   • AInstall a Faraday cage around the control room.
   • BDeploy a wireless intrusion detection system (WIDS) that monitors for rogue access points and clients.
   • CEnable MAC address filtering on all wired switches.
   • DConduct quarterly security awareness training for employees.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A hospital's building management system (BMS) is described as 'air-gapped' because it has no router to the IT network. However, the BMS vendor performs remote maintenance over a cellular modem. Is the BMS truly air-gapped?

   • AYes, because the cellular modem is only for vendor access and not for general internet use.
   • BNo, because the cellular modem creates a logical connection to an external network.
   • CNo, because the BMS is connected to the IT network through the building's electrical wiring.
   • DYes, because there is no direct Ethernet connection to the IT network.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the primary purpose of an air gap in an ICS/SCADA environment?

   • ATo allow secure remote access for vendors and engineers
   • BTo improve the performance of ICS applications by reducing network latency
   • CTo protect critical infrastructure from remote cyber threats by isolating it from external networks
   • DTo simplify compliance with data retention regulations
   Reveal Solution Discussion Select an answer first