Guard ICSSCADA Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard · select all that apply

   A transportation authority's signaling system is air-gapped. The security team has found that a technician used a personal wireless router to extend Wi-Fi coverage into the control room. Select all that apply: Which actions should be taken to address this bypass?

   • AIgnore the incident because the router was only for convenience.
   • BDeploy a wireless intrusion detection system to monitor for future rogue devices.
   • CConduct a physical security sweep for other unauthorized devices.
   • DRemove the rogue wireless router immediately.
   • EImplement a policy that prohibits unauthorized wireless devices.
   Check answers Discussion Select an answer first
2. 22expert · hard

   A military base's weapons system network is air-gapped. A contractor is allowed to bring a laptop into the secure area for presentations. The laptop has wireless capabilities. What is the most important control to prevent a wireless bypass?

   • ARequire the contractor to sign a non-disclosure agreement.
   • BUse a wireless intrusion detection system to monitor for rogue connections.
   • CPhysically disable the laptop's wireless card before allowing it into the secure area.
   • DPlace the laptop in a Faraday bag when not in use.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   In ICS/SCADA security, what does the term 'air gap' refer to?

   • AA dedicated VPN tunnel used for remote administration of ICS devices
   • BA backup power supply that keeps ICS systems running during an outage
   • CA physical or logical isolation between ICS/SCADA networks and external networks
   • DA firewall rule that blocks all inbound traffic from the internet
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which control is specifically used to strengthen an air gap against removable media threats?

   • AUsing a firewall to block inbound traffic
   • BInstalling a network intrusion detection system (IDS)
   • CImplementing multi-factor authentication for remote access
   • DEnforcing a strict USB device policy that disables unauthorized use
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A manufacturing company's OT network is air-gapped, but the production scheduler needs real-time production counts from the OT network to update enterprise resource planning (ERP) systems. The company cannot afford downtime and wants to maintain security. Which solution best balances the need for data exchange with the air gap?

   • AAllow a read-only SQL replication from the OT database to the corporate database.
   • BEstablish a scheduled batch transfer using a secure file transfer protocol over a temporary connection.
   • CInstall a one-way data diode to send production data from the OT network to the corporate network.
   • DHave operators manually enter production counts into the ERP system at the end of each shift.
   Reveal Solution Discussion Select an answer first