ICS/SCADA Security Model ICSSCADA Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which of the following is an example of a defense-in-depth control for an ICS/SCADA environment?

   • AUsing a single password for all OT devices
   • BDisabling all logging to reduce overhead
   • CConnecting ICS directly to the internet for remote access
   • DNetwork segmentation with firewalls between zones
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A manufacturing company has a legacy PLC that cannot be patched. The PLC is on the plant floor and communicates with a Level 2 HMI. The security team needs to reduce the risk of the PLC being exploited. Which control is most appropriate for this specific constraint?

   • ADisconnect the PLC from the network and operate it in manual mode.
   • BInstall antivirus software directly on the PLC.
   • CReplace the PLC with a newer model that supports firmware updates.
   • DPlace the PLC behind a firewall that only allows traffic from the HMI on specific ports.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which of the following is a core component of the ICS/SCADA security model?

   • ASecurity zones and conduits
   • BPatch management software
   • CData encryption at rest
   • DIncident response team
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A chemical plant is designing its network architecture. The control system engineer proposes placing the HMI and the engineering workstation in the same zone, while the SCADA server is in a separate zone. The security architect disagrees. What is the most likely reason for the architect's objection?

   • AThe SCADA server should be in the same zone as the HMI for performance reasons.
   • BThe HMI should be in the same zone as the field devices to reduce latency.
   • CThe HMI and engineering workstation have different security requirements and should be in separate zones.
   • DThe engineering workstation should be in the same zone as the SCADA server to simplify patching.
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A power generation facility is designing a new network. The design includes a control center with HMIs and a historian, and a remote substation with a PLC. The security team needs to define the zones and conduits. The team is considering whether to place the historian in the control center zone or in a separate zone. Which consideration is most important for this decision?

   • AThe historian's data sensitivity and the security requirements of the control center zone.
   • BThe physical distance between the control center and the remote substation.
   • CThe number of HMIs in the control center.
   • DThe brand of the PLC at the remote substation.
   Reveal Solution Discussion Select an answer first