ICS/SCADA Security Model ICSSCADA Practice Questions (Page 8)

Questions 36–38

1. 36application · medium

   A water utility is designing a new SCADA system. The design includes a control center with HMIs, a historian, and a remote pumping station with a PLC. The PLC communicates with the HMI over a private WAN link. The security team needs to define the zones and conduits. Which of the following is the most accurate representation?

   • AThe control center is one zone, the pumping station is another zone, and the WAN link is a conduit.
   • BThe HMI and PLC are in the same zone, and the WAN link is a separate zone.
   • CThe control center and pumping station are both in the same zone because they are part of the same SCADA system.
   • DThe WAN link is a zone, and the control center and pumping station are conduits.
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   What is the primary purpose of the ICS/SCADA security model?

   • ATo replace all legacy OT protocols with modern IT protocols to eliminate inherent vulnerabilities.
   • BTo provide a single security solution that can be deployed across all ICS/SCADA installations without customization.
   • CTo define a structured approach for identifying, implementing, and managing security controls across the ICS/SCADA environment.
   • DTo ensure that all ICS/SCADA components are connected to the corporate network for centralized monitoring.
   Reveal Solution Discussion Select an answer first
3. 38foundation · easy

   According to the Purdue model, which level includes the physical devices such as sensors and actuators that interact directly with the industrial process?

   • ALevel 3
   • BLevel 2
   • CLevel 1
   • DLevel 0
   Reveal Solution Discussion Select an answer first