NIST SP 800-82 ICSSCADA Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   According to NIST SP 800-82, what is the first step in developing an ICS security program?

   • ATraining employees on security awareness
   • BDeveloping a system security plan
   • CImplementing security controls from NIST SP 800-53
   • DConducting a risk assessment to identify threats and vulnerabilities
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which of the following is a field device commonly referenced in NIST SP 800-82 as part of an ICS?

   • ADomain Name System (DNS) server
   • BProgrammable Logic Controller (PLC)
   • CFirewall appliance
   • DNetwork switch
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A water treatment facility has a flat network where the SCADA HMI, PLCs, and the corporate IT network all share the same Layer 2 segment. The plant manager wants to reduce the risk of a malware outbreak spreading from IT to the OT environment without replacing the existing PLCs. Which NIST SP 800-82 recommended practice should be implemented first?

   • ADeploy a firewall and segment the network into separate OT and IT zones with controlled communication paths
   • BReplace all PLCs with newer models that have built-in encryption
   • CDisable all remote access to the OT network permanently
   • DInstall antivirus software on every PLC and field device
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A manufacturing company is beginning to develop an ICS security program. They have already identified their critical assets and conducted a risk assessment. According to NIST SP 800-82, what should be the next step in the program development process?

   • AConduct a penetration test on the live production environment
   • BTrain all employees on cybersecurity awareness
   • CDevelop and implement security policies and procedures that address the identified risks
   • DImmediately purchase and deploy a next-generation firewall
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A technician is configuring a new remote access solution for a pipeline control system. The solution must allow engineers to securely access the HMI from home. According to NIST SP 800-82, which configuration is most appropriate?

   • AUse a VPN with multi-factor authentication and a jump host that connects to the control network.
   • BAllow engineers to use a shared password for simplicity.
   • CDisable all remote access and require engineers to be on-site.
   • DExpose the HMI directly to the Internet so engineers can access it easily.
   Reveal Solution Discussion Select an answer first