Physical Security ICSSCADA Practice Questions (Page 10)

Questions 46–50

1. 46expert · hard

   A regional water utility discovers that an unknown individual entered the SCADA control room during the night and may have connected a USB device to an engineering workstation. The security team is called. The workstation is still running and the operator is unsure if any data was exfiltrated. Which response step should be taken FIRST to preserve evidence while maintaining operational continuity?

   • ARun a full antivirus scan on the workstation
   • BImmediately power off the workstation to prevent further damage
   • CIsolate the workstation from the network but leave it powered on and capture a memory image before any further action
   • DReboot the workstation to clear any malicious processes
   Reveal Solution Discussion Select an answer first
2. 47application · medium

   A manufacturing plant allows third-party vendors to perform routine maintenance on PLCs. The plant's physical security policy requires that vendors be escorted at all times. A vendor arrives without an escort and demands access to the control room to fix a 'critical' issue. What should the security officer do?

   • AAllow access because the issue is critical and the vendor is known from previous visits
   • BDeny access and reschedule the vendor for a time when an escort is available
   • CCall the vendor's supervisor to verify identity and then allow access
   • DAllow access but require the vendor to wear a visitor badge
   Reveal Solution Discussion Select an answer first
4. 48expert · hard

   A petrochemical plant has a badge-controlled door to the DCS control room. The security team wants to implement a defense-in-depth strategy that integrates physical access with logical security. Which combination of controls would provide the most effective integration?

   • AInstall CCTV and post a guard at the door, but do not change the logical access controls
   • BUse a shared door code and rely on the network firewall for logical security
   • CRequire badge and PIN at the door, and automatically disable the user's network account when the badge is deactivated
   • DUse a biometric reader at the door and manually disable network accounts when an employee leaves
   Reveal Solution Discussion Select an answer first
5. 49foundation · easy

   What is the primary purpose of a mantrap in physical access control?

   • ATo trap and hold intruders until law enforcement arrives
   • BTo serve as an emergency exit route during a fire
   • CTo allow only one person to enter at a time and prevent tailgating
   • DTo provide a secure area for storing sensitive equipment
   Reveal Solution Discussion Select an answer first
6. 50application · medium

   A hospital's building management system (BMS) controls the HVAC and lighting for the entire campus. The BMS server is located in a small equipment room. The hospital is in an area prone to short power outages. Which environmental control is most important to ensure the BMS server continues operating during an outage?

   • AInstall a fire extinguisher in the equipment room
   • BInstall an uninterruptible power supply (UPS) with enough capacity to allow a graceful shutdown or bridge to a generator
   • CAdd a backup air conditioner
   • DPlace a sign on the door that says 'Critical Equipment'
   Reveal Solution Discussion Select an answer first