Guard ICSSCADA Practice Questions (Page 9)

Questions 41–42

1. 41application · medium

   A hospital's building management system (BMS) is air-gapped, but a vendor technician needs to apply a firmware update. The technician brings a USB drive with the update. The security team wants to prevent malware from entering the BMS. Which control should be implemented?

   • AAllow the USB drive to be used after a quick antivirus scan on the technician's laptop.
   • BLet the technician use the USB drive because the BMS is air-gapped and therefore safe.
   • CProvide a dedicated, sanitized USB drive and require the update to be transferred through a secure review station.
   • DDisable USB ports on all BMS workstations and require the technician to use a network connection.
   Reveal Solution Discussion Select an answer first
2. 42expert · hard · select all that apply

   A chemical plant is strengthening its air-gapped control network. Which combination of controls would provide a defense-in-depth approach? (Select all that apply.)

   • AImplement a USB whitelisting solution that only allows approved devices.
   • BDeploy an intrusion detection system (IDS) on the control network.
   • CAllow wireless access for maintenance laptops to improve convenience.
   • DConduct regular security awareness training for all personnel with access to the control network.
   • EEnforce a least-privilege access model for all control system users.
   Check answers Discussion Select an answer first