For the field devices at Level 0 of the Purdue model, which security control is most appropriate?

An enterprise identity management system for all sensors

Physical security measures such as locked enclosures and tamper detection

A host-based intrusion detection system (HIDS) on every sensor

A network firewall installed directly on each actuator

A water utility is designing a new SCADA network. The design includes a Level 2 zone with HMIs and engineering workstations, and a Level 1 zone with PLCs. The security team wants to implement a data diode between the Level 1 and Level 2 zones to prevent any data from flowing back to the PLCs. The operations team objects because they need to send configuration changes to the PLCs. What is the best solution?

Use a data diode that allows one-way traffic from Level 2 to Level 1, and a separate low-bandwidth channel for acknowledgments.

Place the engineering workstation in the Level 1 zone so it can directly configure the PLCs.

Remove the data diode and rely on the existing network segmentation to protect the PLCs.

Replace the data diode with a firewall that allows specific protocols between the zones.

A chemical plant is implementing a defense-in-depth strategy. The plant has a legacy system that cannot be patched, and the vendor is no longer providing support. The security team is considering several options. Which approach best addresses the risk of the unpatched system?

Replace the legacy system immediately with a modern system, regardless of cost.

Disconnect the legacy system from the network and use manual processes instead.

Apply virtual patches through the firewall to protect the legacy system.

Isolate the legacy system in a separate zone with strict access controls and monitor all traffic to and from it.

EC-CouncilICS/SCADA Cybersecurity

Domain 1Objective 2

ICS/SCADA Security Model ICSSCADA Practice Questions (Page 2)

Part of the Introduction to ICS/SCADA Network Defense domain, which makes up ~13% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–10 in this domain), expect 1–2 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

5concepts

Questions 6–10

6foundation · easy
For the field devices at Level 0 of the Purdue model, which security control is most appropriate?
Select an answer first
7expert · hard
A water utility is designing a new SCADA network. The design includes a Level 2 zone with HMIs and engineering workstations, and a Level 1 zone with PLCs. The security team wants to implement a data diode between the Level 1 and Level 2 zones to prevent any data from flowing back to the PLCs. The operations team objects because they need to send configuration changes to the PLCs. What is the best solution?
Select an answer first
8foundation · easy
In the Purdue Enterprise Reference Architecture, which level typically contains the Human-Machine Interface (HMI) and supervisory control systems?
Select an answer first
9expert · hard
A chemical plant is implementing a defense-in-depth strategy. The plant has a legacy system that cannot be patched, and the vendor is no longer providing support. The security team is considering several options. Which approach best addresses the risk of the unpatched system?
Select an answer first
10application · easy
A manufacturing plant is documenting its network architecture. The team identifies the following components: a robotic arm controller, a historian database, an engineering workstation, and an ERP system. According to the Purdue model, which component belongs at Level 2?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ICSSCADA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ICSSCADA” is a trademark of its owner, used for identification only.

ICS/SCADA Security Model ICSSCADA Practice Questions (Page 2)

Questions 6–10

For the field devices at Level 0 of the Purdue model, which security control is most appropriate?

In the Purdue Enterprise Reference Architecture, which level typically contains the Human-Machine Interface (HMI) and supervisory control systems?

A chemical plant is implementing a defense-in-depth strategy. The plant has a legacy system that cannot be patched, and the vendor is no longer providing support. The security team is considering several options. Which approach best addresses the risk of the unpatched system?

A manufacturing plant is documenting its network architecture. The team identifies the following components: a robotic arm controller, a historian database, an engineering workstation, and an ERP system. According to the Purdue model, which component belongs at Level 2?

Keep studying — Introduction to ICS/SCADA Network Defense