Guard ICSSCADA Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company claims its industrial network is air-gapped because it is not connected to the internet. However, the network is connected to the corporate network via a managed switch with VLAN separation. Is this a true air gap?

   • ANo, because the network is connected to the corporate network, which is a potential path to external networks.
   • BNo, because the managed switch is a single point of failure.
   • CYes, because the corporate network is trusted and does not connect to the internet.
   • DYes, because VLAN separation provides logical isolation equivalent to a physical air gap.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which of the following best describes a logical air gap?

   • AEncrypting all data transmitted between the ICS and corporate networks
   • BUsing a VPN to securely connect remote engineers to the ICS network
   • CUsing a firewall to block all traffic between the ICS network and the corporate network
   • DPhysically unplugging the ICS network from the corporate network
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A power plant's air-gapped DCS network requires periodic vendor support. The vendor insists on remote access to diagnose issues. The plant's security policy prohibits any network connection to the DCS. Which option best satisfies both the vendor's need and the security policy?

   • AProvide the vendor with a dedicated, isolated workstation that has access to the DCS only during scheduled maintenance.
   • BTemporarily connect the DCS to the internet for the duration of the support session.
   • CHave the vendor provide a diagnostic script that the plant's own engineers run on the DCS.
   • DAllow the vendor to use a VPN with two-factor authentication.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which of the following is a common way that an air gap is bypassed?

   • AEncrypting data at rest on servers
   • BUsing removable media such as USB drives
   • CUsing strong passwords for user accounts
   • DImplementing network segmentation
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A nuclear research facility's control network is air-gapped. An employee, wanting to check email, connects a personal smartphone to a USB port on a control workstation to charge it. What is the primary risk?

   • AThe smartphone's wireless signal will interfere with control equipment.
   • BThe employee will be distracted and make errors.
   • CThe smartphone will drain the workstation's battery.
   • DThe smartphone may introduce malware through the USB connection.
   Reveal Solution Discussion Select an answer first