IT Security Model ICSSCADA Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which of the following is an example of a defense-in-depth control layer in an ICS/SCADA network?

   • ADisabling all remote access to the control network
   • BA single firewall between the corporate network and the control network
   • COnly using strong passwords on all systems
   • DNetwork segmentation, host-based antivirus, and security awareness training
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   An organization is developing a security model for its new ICS/SCADA environment. They want to ensure that the model addresses the unique characteristics of industrial systems, such as real-time requirements and legacy protocols. Which component of the IT security model is MOST directly responsible for defining how different parts of the network trust each other?

   • AThe CIA triad
   • BIT/OT convergence
   • CSecurity zones and conduits
   • DDefense in depth
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A hospital is integrating its clinical IT network with the building management system (BMS) to enable energy optimization. The BMS controls critical life-safety equipment, such as ventilation and fire suppression. The IT team wants to apply standard IT security patches to the BMS controllers, but the OT team is concerned about downtime. What is the BEST approach to balance security and availability?

   • AApply patches immediately to all BMS controllers to reduce vulnerability
   • BApply patches only to the IT network and leave the BMS unpatched
   • CDefer all patches indefinitely to ensure availability
   • DTest patches in a lab environment and schedule deployment during planned maintenance windows
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A water utility is deploying a new SCADA system to control remote pumping stations. The engineering team wants to prioritize real-time response and continuous operation over data secrecy. Which security objective should be weighted most heavily in the security model for this SCADA environment?

   • ANon-repudiation
   • BAvailability
   • CIntegrity
   • DConfidentiality
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A city's water distribution system is being upgraded. The architecture includes a SCADA control center, remote pumping stations, and a corporate network. The security architect must design security zones and conduits. The pumping stations connect to the control center via a wireless network. The corporate network connects to the control center via a fiber link. Which of the following is the most appropriate zone and conduit design?

   • ADefine the control center, pumping stations, and corporate network as separate zones, with the wireless and fiber links as conduits
   • BDefine the entire network as a single zone to simplify management
   • CPlace the control center and corporate network in the same zone, and the pumping stations in another zone
   • DPlace the control center and pumping stations in the same zone, and the corporate network in another zone
   Reveal Solution Discussion Select an answer first