Guard ICSSCADA Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A nuclear research facility has a strict air gap policy. An engineer needs to transfer a large simulation file from the air-gapped network to a university collaborator. Which method is most consistent with the air gap policy?

   • ABurn the file to a DVD and mail it to the collaborator.
   • BUse a USB drive to copy the file to a non-air-gapped workstation and then email it.
   • CUpload the file to a cloud storage service from the air-gapped workstation.
   • DSend the file as an email attachment from the air-gapped network.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which operational requirement often conflicts with maintaining an air gap?

   • AUse of uninterruptible power supplies
   • BRemote access for vendors and engineers
   • CPhysical security of the control room
   • DRegular backup of configuration files to local media
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A water utility maintains a physically air-gapped SCADA network for its treatment plant. Operators need to transfer daily production reports to the corporate office for regulatory compliance. What is the most secure method that preserves the air gap?

   • AAllow a corporate IT administrator to remotely access the SCADA historian to copy the files.
   • BConfigure a scheduled FTP transfer from the SCADA historian to the corporate file server.
   • CPlace the reports on a shared folder accessible from both networks through a firewall rule.
   • DUse a one-way data diode to push report files from the SCADA network to the corporate network.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A defense contractor's industrial control network is air-gapped, but employees frequently use personal smartphones near the control room. Which risk does this pose to the air gap?

   • ASmartphones emit electromagnetic interference that could corrupt control signals.
   • BSmartphones could connect to the control network via Bluetooth if a device is paired.
   • CSmartphones could be used to take photos of the control room, but that does not affect the air gap.
   • DSmartphones could overload the Wi-Fi network if they are used as hotspots.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A manufacturing company wants to isolate its robotic production line from the enterprise network while still allowing the production scheduler to send job orders. The ICS team proposes a firewall with strict rules. Which additional measure would best strengthen the logical air gap?

   • AAllow only TCP port 80 between the two networks.
   • BUse a DMZ with a jump host that requires manual approval for each data transfer.
   • CPlace the firewall in transparent mode to avoid changing IP addresses.
   • DEnable logging on the firewall and review logs monthly.
   Reveal Solution Discussion Select an answer first