IT Security Model ICSSCADA Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is a key difference between IT and OT security models in an ICS/SCADA environment?

   • AOT security uses the same protocols and hardware as IT security
   • BIT security prioritizes data confidentiality, while OT security often prioritizes system availability and safety
   • CIT security does not need to consider physical safety
   • DOT security models do not use the CIA triad
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A hospital's building management system (BMS) controls HVAC and access doors. The IT department is updating the security model and must decide how to prioritize the CIA triad for the BMS. Which statement BEST reflects the correct prioritization for this ICS environment?

   • AAvailability is most important because the BMS must keep the building operational and safe
   • BAll three are equally important and should be weighted the same
   • CIntegrity is most important because the BMS must ensure accurate temperature and access logs
   • DConfidentiality is most important because patient data is stored in the BMS
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A pharmaceutical company is integrating its OT network with the corporate IT network to enable real-time production reporting. The IT security team wants to apply standard IT security policies, including mandatory password changes every 30 days and full disk encryption on all OT workstations. The OT team objects because these policies could disrupt production. What is the most appropriate approach to address this conflict?

   • ADevelop a risk-based security policy that balances IT and OT requirements
   • BApply the IT policies to all OT systems to ensure consistency
   • CExempt OT systems from all IT security policies
   • DUse a demilitarized zone (DMZ) to isolate OT and ignore IT policies
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A manufacturing company is implementing defense-in-depth for its ICS network. They have already deployed a firewall between the IT and OT networks and installed antivirus on engineering workstations. What additional control would BEST complete a layered defense strategy?

   • AReplace all passwords with longer passphrases
   • BImplement network segmentation with security zones and conduits
   • CDisable all USB ports on engineering workstations
   • DIncrease the frequency of antivirus updates
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A large utility is merging its IT and OT networks to enable real-time grid analytics. The IT team wants to deploy an active vulnerability scanner to identify weaknesses in the OT environment. The OT team warns that the scanner may disrupt critical PLCs. The utility must maintain high availability of the power grid. What is the BEST approach to balance security and availability?

   • ADeploy the scanner on a separate VLAN that mirrors the OT network traffic
   • BSkip vulnerability scanning and rely solely on firewall rules
   • CUse passive network monitoring to identify vulnerabilities without sending traffic to PLCs
   • DRun the active scanner only during scheduled maintenance windows
   Reveal Solution Discussion Select an answer first