NIST SP 800-82 ICSSCADA Practice Questions (Page 9)

Questions 41–42

1. 41application · medium

   During a security review of a natural gas pipeline SCADA system, you notice that the legacy protocol used between the master station and remote terminal units (RTUs) has no authentication or encryption. An attacker who gains access to the network could inject false commands. Which NIST SP 800-82 concept best describes this situation?

   • AA vulnerability inherent in the ICS communication protocol
   • BA lack of physical security at the RTU sites
   • CA threat actor with a specific motive to disrupt operations
   • DA misconfiguration in the firewall rule set
   Reveal Solution Discussion Select an answer first
2. 42foundation · easy

   What is the primary purpose of NIST SP 800-82, 'Guide to Industrial Control Systems (ICS) Security'?

   • ATo provide a detailed technical specification for the design of industrial control system hardware components
   • BTo establish a certification program for ICS security professionals
   • CTo provide guidance for securing industrial control systems, including supervisory control and data acquisition (SCADA) systems, distributed control systems (DCS), and other control system configurations
   • DTo define mandatory security requirements for all federal information systems, including those used in industrial control environments
   Reveal Solution Discussion Select an answer first