ICS/SCADA Security Model ICSSCADA Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the role of a conduit in an ICS/SCADA network architecture?

   • AIt provides a controlled communication path between security zones.
   • BIt authenticates users before they access the system.
   • CIt physically separates all network devices to prevent any data exchange.
   • DIt stores backup data for disaster recovery purposes.
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A chemical plant has a defense-in-depth strategy that includes network segmentation, firewalls, and an IDS. The security team wants to add a control that specifically detects an attacker who has compromised a Level 2 HMI and is attempting to send malicious commands to a Level 1 PLC. Which control is most effective for this scenario?

   • ADeploy an application-aware firewall between Level 2 and Level 1 that inspects the protocol for malicious commands.
   • BImplement a strict password policy for HMI users.
   • CIncrease the logging level on the PLC.
   • DAdd a second IDS on the Level 1 network segment.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A manufacturing company is implementing a security model for its ICS. The security team proposes using a next-generation firewall (NGFW) with application-level inspection between the corporate and control networks. The operations team is concerned that the NGFW may introduce latency and block legitimate ICS protocols. What is the best way to address this concern?

   • AReplace the NGFW with a simple router to avoid any potential latency issues.
   • BDeploy the NGFW in a passive monitoring mode initially to understand traffic patterns before enforcing policies.
   • CDisable application-level inspection and use only port-based rules to reduce latency.
   • DConfigure the NGFW to allow all traffic between the networks and rely on the existing security measures.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A pharmaceutical company has a segregated OT network with a firewall at the boundary. The security team wants to add a control that provides early warning of a potential attack before it reaches the OT network. Which control is most aligned with a defense-in-depth strategy?

   • AImplement a strict change management process for OT devices.
   • BDeploy a honeypot in the DMZ that mimics an OT device.
   • CAdd a second firewall inside the OT network.
   • DIncrease the frequency of antivirus updates on OT workstations.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A manufacturing plant is implementing a security model. The plant has a mix of modern and legacy devices. The security team wants to implement network access control (NAC) to ensure only authorized devices can connect. The operations team is concerned that NAC might block legitimate devices. What is the best way to implement NAC?

   • ADisable NAC on legacy devices to avoid compatibility issues.
   • BUse NAC only on the corporate network, not the control network.
   • CEnforce NAC policies immediately to ensure maximum security.
   • DDeploy NAC in a monitoring mode first to identify all devices and their behavior before enforcing policies.
   Reveal Solution Discussion Select an answer first