NIST SP 800-82 ICSSCADA Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   In the context of NIST SP 800-82, which of the following best describes a typical ICS architecture?

   • AA hierarchical structure with a central control system, remote field devices, and communication links that support control loops
   • BA peer-to-peer network where all field devices communicate directly with each other without a central system
   • CA flat network where all devices are directly connected to the internet for remote monitoring
   • DA single mainframe computer that directly controls all field devices without any intermediate controllers
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A power utility is implementing NIST SP 800-82 controls. They need to ensure that only authorized engineers can modify the logic of the protective relays in the substations. Which type of control should they prioritize?

   • AOperational controls such as a monthly review of relay settings
   • BPhysical controls such as locks on the substation doors
   • CTechnical controls such as role-based access control and strong authentication on the relay configuration interfaces
   • DManagement controls such as a new hiring policy for engineers
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A hospital's building management system (BMS) is being integrated with the corporate IT network for remote monitoring. The security team is developing a security policy for the BMS. According to NIST SP 800-82, which element should be included in the policy?

   • AA clear statement of roles and responsibilities for securing the BMS, including both IT and facilities staff.
   • BA prohibition on any remote access to the BMS.
   • CA requirement that all BMS traffic be encrypted, regardless of performance impact.
   • DA list of all employees' personal mobile devices.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which document, as described in NIST SP 800-82, outlines the security requirements and controls for an ICS system?

   • ASystem Security Plan (SSP)
   • BBusiness Continuity Plan
   • CIncident Response Plan
   • DNetwork Diagram
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which of the following is a recommended practice for designing a secure ICS architecture according to NIST SP 800-82?

   • AConnecting all ICS components directly to the internet for easier remote access
   • BUsing a single flat network for all devices to simplify management
   • CSegmenting the network to separate ICS from corporate IT systems
   • DDisabling all security controls to ensure system performance
   Reveal Solution Discussion Select an answer first