An organization is integrating its IT and OT networks to allow real-time production data to flow to the enterprise resource planning (ERP) system. The IT security team wants to apply standard IT security policies, but the OT team is concerned about potential disruptions. What is the BEST approach to address both concerns?

Apply the same security policies to both networks without exceptions

Disconnect the OT network from the IT network entirely

Create a demilitarized zone (DMZ) with a data diode to allow one-way data flow from OT to IT

Allow the OT team to manage all security for both networks

Which component is typically part of an IT security model as applied to ICS/SCADA network defense?

Guaranteeing 100% uptime of all systems

Risk assessment and management processes

Replacing all field devices with newer models

Physical locking of all control room doors

A manufacturing company is integrating its OT network with the IT network to allow real-time production data to be accessed by enterprise resource planning (ERP) systems. The OT team is concerned about the availability of the production line. Which of the following is the most important consideration when integrating IT and OT security models?

Ensuring the same security policies apply to both networks

Balancing the need for data access with the operational requirements of the OT network

Using the same security tools for both networks

Prioritizing the confidentiality of production data

A natural gas pipeline company is implementing defense-in-depth. They have deployed network segmentation, firewalls, and intrusion prevention systems (IPS). What additional control would BEST address the human factor, which is often a weak point in security?

Implementing a security awareness training program for all employees

Increasing the password length for all user accounts

Deploying a honeypot to attract attackers

Adding more firewalls at the network perimeter

A power utility is implementing defense-in-depth for its substation automation network. They have installed firewalls, intrusion detection systems (IDS), and strict access control lists. What additional layer would BEST enhance the defense-in-depth strategy?

Using a single strong password for all devices to simplify management

Increasing the number of firewalls between every device

Implementing a security information and event management (SIEM) system to correlate logs

Disabling all remote access to the substation network

EC-CouncilICS/SCADA Cybersecurity

Domain 1Objective 1

IT Security Model ICSSCADA Practice Questions (Page 3)

Part of the Introduction to ICS/SCADA Network Defense domain, which makes up ~13% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–10 in this domain), expect 1–2 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

5concepts

Questions 11–15

11application · medium
An organization is integrating its IT and OT networks to allow real-time production data to flow to the enterprise resource planning (ERP) system. The IT security team wants to apply standard IT security policies, but the OT team is concerned about potential disruptions. What is the BEST approach to address both concerns?
Select an answer first
12foundation · easy
Which component is typically part of an IT security model as applied to ICS/SCADA network defense?
Select an answer first
13application · medium
A manufacturing company is integrating its OT network with the IT network to allow real-time production data to be accessed by enterprise resource planning (ERP) systems. The OT team is concerned about the availability of the production line. Which of the following is the most important consideration when integrating IT and OT security models?
Select an answer first
14application · medium
A natural gas pipeline company is implementing defense-in-depth. They have deployed network segmentation, firewalls, and intrusion prevention systems (IPS). What additional control would BEST address the human factor, which is often a weak point in security?
Select an answer first
15application · medium
A power utility is implementing defense-in-depth for its substation automation network. They have installed firewalls, intrusion detection systems (IDS), and strict access control lists. What additional layer would BEST enhance the defense-in-depth strategy?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ICSSCADA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ICSSCADA” is a trademark of its owner, used for identification only.

IT Security Model ICSSCADA Practice Questions (Page 3)

Questions 11–15

Which component is typically part of an IT security model as applied to ICS/SCADA network defense?

A natural gas pipeline company is implementing defense-in-depth. They have deployed network segmentation, firewalls, and intrusion prevention systems (IPS). What additional control would BEST address the human factor, which is often a weak point in security?

A power utility is implementing defense-in-depth for its substation automation network. They have installed firewalls, intrusion detection systems (IDS), and strict access control lists. What additional layer would BEST enhance the defense-in-depth strategy?

Keep studying — Introduction to ICS/SCADA Network Defense