A water treatment facility is designing its network architecture. They want to ensure that the control system network is isolated from the corporate network but still allows historians to receive process data. According to the security zones and conduits model, what should they implement?

A wireless bridge between the two networks

A direct Ethernet cable between the historian and the corporate network

A single flat network with all devices connected to the same switch

Two separate zones with a conduit controlled by a firewall

A manufacturing plant is implementing security zones. They have a control system zone and a safety system zone. According to the zones and conduits model, how should traffic between these two zones be handled?

Connect the zones with a wireless bridge for flexibility

Block all traffic between the zones to ensure isolation

Use a conduit with a firewall that permits only necessary communication

Allow all traffic between the zones to ensure safety systems receive real-time data

What is the core idea behind the defense-in-depth strategy in ICS/SCADA network security?

Implementing all security controls at the network perimeter only

Using multiple layers of security controls so that if one fails, others still provide protection

Focusing only on physical security measures to protect the facility

Relying on a single, highly sophisticated firewall to block all attacks

A manufacturing company is merging its IT and OT networks to enable real-time production monitoring. The IT team wants to use a standard IT identity management system (Active Directory) to control access to OT systems. The OT team is concerned about the impact on legacy systems that do not support modern authentication protocols. What is the BEST approach to achieve integration while addressing the OT team's concern?

Disable authentication on legacy OT systems to avoid compatibility issues

Use a security gateway that translates authentication between IT and OT systems

Force all OT systems to use Active Directory authentication

Keep separate identity management systems for IT and OT

A chemical plant is implementing defense-in-depth for its OT network. The plant has a control network, a safety system network, and a business network. Which of the following is an example of a defense-in-depth control?

Installing antivirus on all OT workstations

Using a single firewall between the business network and the control network

Relying on physical security only

Implementing network segmentation, access control, and monitoring

EC-CouncilICS/SCADA Cybersecurity

Domain 1Objective 1

IT Security Model ICSSCADA Practice Questions (Page 5)

Part of the Introduction to ICS/SCADA Network Defense domain, which makes up ~13% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–10 in this domain), expect 1–2 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

5concepts

Questions 21–25

21application · medium
A water treatment facility is designing its network architecture. They want to ensure that the control system network is isolated from the corporate network but still allows historians to receive process data. According to the security zones and conduits model, what should they implement?
Select an answer first
22application · medium
A manufacturing plant is implementing security zones. They have a control system zone and a safety system zone. According to the zones and conduits model, how should traffic between these two zones be handled?
Select an answer first
23foundation · easy
What is the core idea behind the defense-in-depth strategy in ICS/SCADA network security?
Select an answer first
24expert · hard
A manufacturing company is merging its IT and OT networks to enable real-time production monitoring. The IT team wants to use a standard IT identity management system (Active Directory) to control access to OT systems. The OT team is concerned about the impact on legacy systems that do not support modern authentication protocols. What is the BEST approach to achieve integration while addressing the OT team's concern?
Select an answer first
25application · medium
A chemical plant is implementing defense-in-depth for its OT network. The plant has a control network, a safety system network, and a business network. Which of the following is an example of a defense-in-depth control?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ICSSCADA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ICSSCADA” is a trademark of its owner, used for identification only.