A chemical plant's safety system is air-gapped, but a recent incident showed that a contractor plugged a personal laptop into a maintenance port to run diagnostics. Which control would most effectively prevent this type of bypass?

Add a second firewall between the maintenance port and the safety system.

Implement 802.1X network access control on all switch ports.

Require contractors to sign a non-disclosure agreement.

Increase the logging level on the safety system's historian.

A power utility is reviewing its air gap security controls. Which of the following controls are effective in strengthening an air gap? (Select all that apply.)

Disable USB ports on all SCADA workstations and enforce a removable media policy.

Enforce strict access controls and role-based permissions for SCADA systems.

Allow wireless access for convenience but restrict it to a separate VLAN.

Implement network monitoring to detect unusual traffic patterns on the SCADA network.

Use a shared password for all SCADA devices to simplify maintenance.

Which of the following is a method for implementing an air gap?

Installing antivirus software on all ICS workstations

Using a firewall to allow only specific ports between networks

Enabling encryption on all network traffic

Physically disconnecting the ICS network from all external networks

A pipeline company has an air-gapped SCADA network. The security team wants to detect any attempt to bypass the air gap. Which control is most effective for detection?

Deploy network monitoring sensors on the SCADA network to detect unusual traffic patterns.

Implement strict USB port controls and disable unused ports.

Use a combination of network monitoring, host-based monitoring, and physical security checks.

Conduct regular physical security inspections of the control room and equipment.

Which security control helps detect unauthorized connections that could bypass an air gap?

Using a firewall to block all inbound traffic

Network monitoring to detect unexpected traffic or devices

EC-CouncilICS/SCADA Cybersecurity

Domain 7Objective 2

Guard ICSSCADA Practice Questions (Page 6)

Part of the Bridging the Air Gap domain, which makes up ~8% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~4–6 in this domain), expect 1–2 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

6concepts

Questions 26–30

26application · medium
A chemical plant's safety system is air-gapped, but a recent incident showed that a contractor plugged a personal laptop into a maintenance port to run diagnostics. Which control would most effectively prevent this type of bypass?
Select an answer first
27application · medium · select all that apply
A power utility is reviewing its air gap security controls. Which of the following controls are effective in strengthening an air gap? (Select all that apply.)
Select an answer first
28foundation · easy
Which of the following is a method for implementing an air gap?
Select an answer first
29application · medium
A pipeline company has an air-gapped SCADA network. The security team wants to detect any attempt to bypass the air gap. Which control is most effective for detection?
Select an answer first
30foundation · easy
Which security control helps detect unauthorized connections that could bypass an air gap?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ICSSCADA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ICSSCADA” is a trademark of its owner, used for identification only.