IT Security Model ICSSCADA Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A chemical plant is implementing defense-in-depth. They have a limited budget and must choose between two controls: (1) an intrusion detection system (IDS) that monitors network traffic, or (2) a security information and event management (SIEM) system that correlates logs from multiple sources. The plant has a small security team and a flat network. Which control should they choose FIRST to improve their security posture?

   • ADeploy the SIEM first because it correlates logs from multiple sources
   • BImplement network segmentation first, then deploy the IDS
   • CDeploy the IDS first because it provides immediate visibility into network traffic
   • DDeploy both simultaneously to maximize coverage
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A natural gas pipeline company is updating its security program. The security manager wants to ensure that the IT security model is applied to the ICS/SCADA environment. Which activity best demonstrates the application of the IT security model to ICS/SCADA?

   • APurchasing a security information and event management (SIEM) system
   • BDefining security policies, implementing controls, and monitoring effectiveness
   • CImplementing a single firewall at the OT perimeter
   • DConducting a risk assessment that identifies assets, threats, and vulnerabilities
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company is merging its IT and OT networks to enable predictive maintenance analytics. The IT team proposes using standard IT security tools, including active vulnerability scanning, on the OT network. The OT team is concerned about the impact on legacy PLCs. What is the BEST course of action?

   • AUse passive monitoring and network taps to assess the OT environment
   • BDisconnect the OT network from the IT network to avoid any risk
   • CRun active scans during off-peak hours to minimize disruption
   • DDeploy the same IT security agents on all OT devices
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which statement correctly describes the priority of the CIA triad in a typical ICS/SCADA environment compared to a typical IT environment?

   • AIntegrity is irrelevant in ICS/SCADA because physical processes are self-correcting
   • BThe CIA triad does not apply to ICS/SCADA systems
   • CAvailability is often prioritized higher in ICS/SCADA due to the need for continuous process operation
   • DConfidentiality is always the top priority in both environments
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A hospital's building management system (BMS) controls HVAC and access doors. The BMS is connected to the IT network for remote monitoring. The IT team wants to apply the CIA triad to the BMS. Which of the following correctly prioritizes the CIA triad for the BMS?

   • AIntegrity, confidentiality, availability
   • BAvailability, integrity, confidentiality
   • CAll three are equally important
   • DConfidentiality, integrity, availability
   Reveal Solution Discussion Select an answer first