NIST SP 800-82 ICSSCADA Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A water treatment facility uses a flat network where the SCADA HMI, PLCs, and the corporate IT network all share the same broadcast domain. The facility manager wants to reduce the risk of a malware outbreak on the corporate network reaching the control system. According to NIST SP 800-82, which approach should be implemented first?

   • ADisable all remote access to the control system to eliminate external threats.
   • BDeploy a firewall between the corporate network and the control system network, and segment the control network into zones based on function and risk.
   • CApply the latest firmware updates to all field devices before making any network changes.
   • DInstall antivirus software on every PLC and RTU in the facility.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which of the following is a methodology recommended in NIST SP 800-82 for assessing the security of an ICS?

   • AConducting a vulnerability assessment using checklists and penetration testing
   • BReviewing employee performance records
   • CPerforming a financial audit of the organization
   • DTesting the physical strength of equipment
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   An external auditor is conducting a security assessment of a chemical plant's DCS. The plant has a mature security program, but the auditor finds that the DCS does not have a formal patch management process. The operations team argues that patching is too risky because it could disrupt production. The auditor must recommend a course of action that aligns with NIST SP 800-82. Which recommendation is most appropriate?

   • AStop patching the DCS entirely to ensure production is never disrupted.
   • BRely solely on compensating controls such as network segmentation and IDS to mitigate vulnerabilities.
   • CDevelop a risk-based patch management program that includes testing patches in a non-production environment and scheduling maintenance windows.
   • DApply all patches immediately without testing to ensure the system is secure.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   In NIST SP 800-82, which category of security controls includes measures like physical security and personnel security?

   • AAdministrative controls
   • BManagement controls
   • CTechnical controls
   • DOperational controls
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which of the following is a common vulnerability specific to ICS environments as identified in NIST SP 800-82?

   • AOver-reliance on open-source software
   • BUse of proprietary communication protocols that lack security features
   • CExcessive use of cloud-based storage for control data
   • DLack of employee training on social media usage
   Reveal Solution Discussion Select an answer first