Guard ICSSCADA Practice Questions (Page 7)

Questions 31–35

1. 31expert · hard · select all that apply

   A manufacturing plant's OT network is air-gapped. The security team has identified that employees are using personal USB drives to transfer files, and some have connected personal devices to charge. The team wants to strengthen the air gap. Select all that apply: Which controls should be implemented?

   • AImplement a USB drive registration and scanning process for approved devices.
   • BAllow personal devices to charge but only through a USB data blocker.
   • CConduct regular security awareness training on the risks of removable media.
   • DDisable USB ports on all OT workstations.
   • EDeploy endpoint protection that blocks unauthorized USB devices.
   Check answers Discussion Select an answer first
2. 32foundation · easy

   Which threat is the air gap specifically designed to defend against?

   • ANatural disasters damaging control centers
   • BInsider misuse of authorized access
   • CRemote attacks originating from the internet or other external networks
   • DPhysical theft of ICS equipment
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A power generation facility has a physically air-gapped DCS network. During an audit, you find that a technician regularly uses a USB drive to load configuration updates from a vendor laptop that also connects to the internet. Which control is most directly needed to address this air gap bypass?

   • AImplement a strict USB device policy that requires scanning and approval of all removable media before use.
   • BDisable the wireless access point in the control room.
   • CIncrease the frequency of password changes for DCS accounts.
   • DDeploy network intrusion detection on the DCS network.
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A water treatment facility maintains a physically isolated control network for its PLCs. The engineering team needs to transfer updated configuration files from a workstation on the corporate network to a server on the control network. The security manager wants to preserve the air gap while enabling this transfer. Which approach best meets the requirement?

   • ASend the files via email to an operator who can save them to a USB drive and plug it into the control network.
   • BPlace a firewall between the corporate and control networks and open the necessary ports for file transfer.
   • CUse a one-way data diode to push files from the corporate network to the control network.
   • DConnect a laptop to both networks temporarily and copy the files manually.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A defense contractor's manufacturing network is air-gapped. An employee receives a phishing email on their corporate laptop that contains a malicious attachment. The employee opens the attachment, and the malware spreads to a USB drive that is later plugged into the air-gapped network. What is the primary bypass vector?

   • AThe phishing email itself.
   • BThe USB drive used to transfer files.
   • CThe corporate laptop's internet connection.
   • DThe employee's lack of security awareness.
   Reveal Solution Discussion Select an answer first