A security operations center (SOC) monitors alarms from multiple remote sites. An alarm indicates that a door at a remote substation has been opened outside of normal hours. The SOC has no video feed for that site. What should the SOC do first?

Remotely lock the door and wait until morning to investigate

Call the local police and report a burglary in progress

Ignore the alarm because it is likely a false positive

Contact the on-call responder to investigate the alarm

EC-CouncilICS/SCADA Cybersecurity

Domain 6Objective 1

Physical Security ICSSCADA Practice Questions (Page 12)

Part of the Securing the ICS Network domain, which makes up ~16% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–13 in this domain), expect 1–2 from this objective — we provide 56 practice questions to prepare you well beyond it. (estimate)

56questions here

12free pages

10concepts

10 Concepts in This Objective

Physical Security Fundamentals
Physical Threats to ICS
Physical Security Controls
Facility Design and Layout
Access Control Mechanisms
Environmental and Safety Controls
Physical Security Policies and Procedures
Monitoring and Surveillance
Physical Security Incident Response
Integration with Overall Security

Questions 56–56

56application · medium
A security operations center (SOC) monitors alarms from multiple remote sites. An alarm indicates that a door at a remote substation has been opened outside of normal hours. The SOC has no video feed for that site. What should the SOC do first?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to ICSSCADA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ICSSCADA” is a trademark of its owner, used for identification only.

Physical Security ICSSCADA Practice Questions (Page 12)

Questions 56–56

A security operations center (SOC) monitors alarms from multiple remote sites. An alarm indicates that a door at a remote substation has been opened outside of normal hours. The SOC has no video feed for that site. What should the SOC do first?

Keep studying — Securing the ICS Network