ICS/SCADA Security Model ICSSCADA Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A water utility is mapping its network to the Purdue Model. The system includes a remote terminal unit (RTU) that controls a valve, a master station that polls the RTU, and a historian that stores data. The security team is debating whether the RTU is at Level 0 or Level 1. Which factor is most important in determining the correct level?

   • AThe RTU's communication protocol.
   • BThe RTU's physical location in the field.
   • CThe RTU's manufacturer.
   • DThe RTU's function as a control device that directly operates the valve.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   An oil refinery is enhancing its security posture. The current setup has a firewall between the corporate network and the control network, but all control system components are on a single flat network. The security manager wants to implement defense-in-depth. Which additional measure is most aligned with this strategy?

   • ASegment the control network into zones based on the Purdue model and enforce access controls between them.
   • BReplace the existing firewall with a more advanced next-generation firewall at the same location.
   • CIncrease the logging level on all control system devices without changing the network architecture.
   • DDisable all remote access to the control network to eliminate external threats.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   In the ICS/SCADA security model, what is a security zone?

   • AA grouping of logical or physical assets that share common security requirements.
   • BA software application that monitors system logs.
   • CA specific hardware device used to filter network traffic.
   • DA communication path between two different networks.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A pharmaceutical company is implementing a security model for its ICS environment. The company is subject to regulatory requirements that mandate strict access controls and audit trails. Which approach best addresses these requirements while aligning with defense-in-depth?

   • AImplement role-based access control (RBAC) and centralize logging for all ICS components.
   • BRely solely on the firewall to enforce access control and logging.
   • CDisable all logging to reduce storage costs and improve system performance.
   • DUse a single shared account for all operators to simplify access management.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A utility company is reviewing its network architecture. The company has a historian at Level 3 that collects data from Level 2 devices. The security team wants to move the historian to Level 4 to improve security. The operations team is concerned about the impact on data collection. What is the most appropriate decision?

   • AMove the historian to Level 4 as proposed, accepting the potential impact on data collection.
   • BRemove the historian and use a cloud-based analytics platform.
   • CKeep the historian at Level 3 but ensure it is in a separate zone with strict conduits to Level 2 devices.
   • DPlace the historian in the same zone as the Level 2 devices to simplify data collection.
   Reveal Solution Discussion Select an answer first