IT Security Model ICSSCADA Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A manufacturing plant has a flat OT network where all PLCs, HMIs, and engineering workstations are on the same subnet. A recent malware infection spread quickly from an engineering workstation to multiple PLCs. The security team is tasked with implementing a defense-in-depth strategy. Which first step would most effectively reduce the spread of future infections?

   • ADisable USB ports on all HMIs
   • BInstall antivirus on all engineering workstations
   • CDeploy a firewall at the internet edge only
   • DSegment the network into security zones and control traffic between them
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   In the IT security model for ICS/SCADA, what is a security zone?

   • AA type of encryption used to protect data in transit
   • BA single device that filters traffic between networks
   • CA physical area where only authorized personnel are allowed
   • DA group of network assets that share a common security policy and trust level
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A chemical plant is redesigning its network to separate the corporate IT network from the process control network. According to the IT security model for ICS/SCADA, what is the PRIMARY purpose of defining security zones and conduits?

   • ATo eliminate the need for firewalls between different network segments
   • BTo group assets with similar security requirements and control traffic between them
   • CTo allow all devices in the plant to communicate without restrictions
   • DTo enable faster data transfer between IT and OT systems
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A water treatment facility is deploying a new remote monitoring system that sends process data to a cloud-based analytics platform. The OT team is concerned that the data could be intercepted during transmission, but the IT team insists that the data is not sensitive and that encryption would introduce latency. The facility's compliance team notes that the data is not regulated. Which security objective should the OT team emphasize to justify encryption?

   • AConfidentiality
   • BNon-repudiation
   • CIntegrity
   • DAvailability
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A regional power grid operator is deploying a new synchrophasor system that streams time-synchronized measurements to a central analytics platform. The system must maintain precise timing and data integrity for grid stability. The IT team proposes using standard IT security controls, including a firewall that inspects all traffic and a patch management process that requires weekly reboots. The OT team is concerned about the impact on the synchrophasor system. Which of the following is the best approach to reconcile the IT and OT security models?

   • AImplement a firewall that allows the required traffic and schedule patches during planned maintenance windows
   • BUse a separate network for the synchrophasor system without any security controls
   • CExempt the synchrophasor system from all security controls
   • DApply the IT controls as proposed to ensure security
   Reveal Solution Discussion Select an answer first