Guard ICSSCADA Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A power utility's SCADA network is air-gapped from the internet. During an audit, the security team discovers that a technician has been using a personal wireless hotspot to remotely view HMI screens on a tablet. Which control most directly addresses this bypass?

   • ADisable wireless capabilities on all devices within the control network and physically inspect for unauthorized wireless devices.
   • BImplement a policy that prohibits personal devices on the control network and enforce it with network access control.
   • CDeploy a wireless intrusion detection system (WIDS) to monitor for rogue access points and unauthorized Wi-Fi usage.
   • DIncrease the frequency of security awareness training for all staff.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A city's traffic control system is air-gapped. A city council member asks why the system cannot be connected to the internet for easier monitoring. What is the most accurate reason to give?

   • AInternet connectivity would violate federal regulations.
   • BConnecting to the internet would expose the system to remote cyber threats.
   • CThe internet is too slow for real-time traffic control.
   • DThe city does not have the budget for an internet connection.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   How can social engineering be used to bypass an air gap?

   • ABy guessing passwords of ICS operators
   • BBy exploiting a vulnerability in a firewall
   • CBy tricking an employee into connecting an infected device to the ICS network
   • DBy sending phishing emails to the ICS network
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is a common challenge in maintaining an air gap?

   • AThe operational need to exchange data with external systems
   • BThe difficulty of installing patches on air-gapped systems
   • CThe high cost of antivirus licenses
   • DThe need to provide internet access to operators for research
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A government agency operates an air-gapped system for classified data. A new requirement demands that the system receive daily threat intelligence updates. Which approach best preserves the security intent of the air gap?

   • AAllow a vendor to remotely install the updates during scheduled maintenance windows.
   • BEstablish a direct network connection to a trusted threat intelligence provider.
   • CManually transfer the updates using a controlled, scanned USB drive.
   • DUse a wireless connection with strong encryption to receive the updates.
   Reveal Solution Discussion Select an answer first