NIST SP 800-82 ICSSCADA Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which of the following is an example of a management security control as categorized in NIST SP 800-82?

   • ADeveloping and implementing a risk management policy
   • BConducting security awareness training for employees
   • CInstalling antivirus software on workstations
   • DConfiguring firewalls to restrict network traffic
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A security architect is designing a cybersecurity program for a regional electric utility that must comply with NERC CIP. The architect also wants to align with NIST SP 800-82. Which statement accurately describes the relationship between these two frameworks?

   • ANIST SP 800-82 is a regulation that supersedes NERC CIP for all utilities.
   • BNERC CIP and NIST SP 800-82 are identical in scope and can be used interchangeably.
   • CNERC CIP provides mandatory requirements for bulk power systems, while NIST SP 800-82 offers voluntary guidance that can help meet those requirements.
   • DNERC CIP is only applicable to nuclear facilities, while NIST SP 800-82 applies to all other industries.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A food processing company is creating a system security plan (SSP) for its new bottling line control system, following NIST SP 800-82. Which element is most essential to include in the SSP?

   • AA list of all corporate marketing strategies.
   • BA detailed inventory of the system's hardware, software, network connections, and data flows.
   • CThe company's annual budget forecast.
   • DThe names of all employees who have ever worked in the plant.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   An ICS security team has deployed a new monitoring solution that collects logs from PLCs, HMIs, and network devices. The team wants to detect anomalous behavior that could indicate a cyber incident. According to NIST SP 800-82, which practice is most essential for this monitoring effort to be effective?

   • ADisabling all unused ports on the switches
   • BEstablishing a baseline of normal ICS network traffic and device behavior
   • CIncreasing the frequency of firmware updates on all devices
   • DEncrypting all log data at rest
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the purpose of a security audit in an ICS environment according to NIST SP 800-82?

   • ATo determine the market value of the ICS equipment
   • BTo assign blame for security incidents
   • CTo verify that security controls are implemented correctly and are effective
   • DTo create a marketing plan for the organization
   Reveal Solution Discussion Select an answer first