IT Security Model ICSSCADA Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   In an ICS/SCADA environment, which pillar of the CIA triad is most directly impacted when a sensor reading is altered before it reaches the control system?

   • AConfidentiality
   • BAuthenticity
   • CAvailability
   • DIntegrity
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the role of a conduit in the security zone model for ICS/SCADA networks?

   • AIt is a communication path that connects two or more security zones and is subject to security controls
   • BIt is a software tool used to monitor network traffic
   • CIt is a physical cable that carries power to field devices
   • DIt is a backup system that stores historical data
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   In the context of ICS/SCADA network defense, what is the primary purpose of the IT security model?

   • ATo replace all legacy OT protocols with modern IT protocols to eliminate cyber risk
   • BTo provide a structured framework for identifying, implementing, and managing security controls across the organization
   • CTo ensure that all ICS/SCADA devices are connected to the corporate network for centralized monitoring
   • DTo guarantee that no cyber attack can ever succeed against the ICS/SCADA infrastructure
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A utility is designing a new SCADA network. They must allow remote engineers to access the control system for maintenance, but they also want to protect the control system from internet-based attacks. They have a limited budget and cannot afford a dedicated VPN gateway. What is the BEST approach to provide remote access while maintaining security?

   • AExpose the SCADA system directly to the internet with a strong password
   • BUse a jump host in a DMZ that requires multi-factor authentication
   • CAllow remote engineers to connect via a simple port forward on the firewall
   • DDisable remote access entirely to avoid risk
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which of the following is a common integration point between IT and OT security models in an ICS/SCADA environment?

   • AThe use of identical security policies for all systems without exception
   • BThe connection of the corporate network to the control network through a controlled interface
   • CThe complete separation of IT and OT networks with no data exchange
   • DThe use of the same patch management schedule for all devices
   Reveal Solution Discussion Select an answer first