A chemical plant is designing a new control system. The engineers want to ensure that the safety instrumented system (SIS) remains isolated from the basic process control system (BPCS) to prevent a cyber incident from affecting safety functions. Which NIST SP 800-82 architectural principle should they apply?

Rely solely on physical separation of the control room from the field

Implement network segmentation with firewalls or data diodes between the SIS and BPCS networks

Use the same VLAN for both systems to simplify management

Connect the SIS directly to the internet for remote monitoring

Who is the primary target audience for NIST SP 800-82?

Government auditors who assess compliance with federal regulations

System engineers, security professionals, and managers who are responsible for the security of industrial control systems

Vendors of industrial control system hardware and software

End users of industrial control systems who operate the machinery on a daily basis

What is the primary goal of incident response in an ICS environment as described in NIST SP 800-82?

To replace all compromised hardware

To restore normal operations quickly while preserving evidence and minimizing impact

To shut down the entire ICS to prevent further damage

To identify the attacker and pursue legal action

A food processing company is developing a system security plan (SSP) for its ICS as part of its security program. According to NIST SP 800-82, what is a critical element that should be included in the SSP?

A detailed schedule of plant maintenance shutdowns

A description of the system architecture, including all components and data flows

A list of all employee salaries and performance reviews

A marketing plan for the company's products

What is a common threat to ICS that is often highlighted in NIST SP 800-82?

Phishing attacks targeting personal email accounts

Insider threats from disgruntled employees or contractors

Distributed denial-of-service (DDoS) attacks on public websites

Ransomware attacks on home computers

EC-CouncilICS/SCADA Cybersecurity

Domain 5Objective 6

NIST SP 800-82 ICSSCADA Practice Questions (Page 4)

Part of the Standards and Regulations for Cybersecurity domain, which makes up ~13% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–10 in this domain), expect 1–2 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

9concepts

Questions 16–20

16application · medium
A chemical plant is designing a new control system. The engineers want to ensure that the safety instrumented system (SIS) remains isolated from the basic process control system (BPCS) to prevent a cyber incident from affecting safety functions. Which NIST SP 800-82 architectural principle should they apply?
Select an answer first
17foundation · easy
Who is the primary target audience for NIST SP 800-82?
Select an answer first
18foundation · easy
What is the primary goal of incident response in an ICS environment as described in NIST SP 800-82?
Select an answer first
19application · medium
A food processing company is developing a system security plan (SSP) for its ICS as part of its security program. According to NIST SP 800-82, what is a critical element that should be included in the SSP?
Select an answer first
20foundation · easy
What is a common threat to ICS that is often highlighted in NIST SP 800-82?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ICSSCADA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ICSSCADA” is a trademark of its owner, used for identification only.