Physical Security ICSSCADA Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A chemical plant has a control room that is accessible from a public corridor. The door is currently unlocked during business hours. Which physical security control should be implemented FIRST to restrict access to authorized personnel only?

   • APlace a potted plant in front of the door to block the entrance
   • BAdd a sign that says 'Authorized Personnel Only'
   • CInstall an electronic access control system with key cards and a door strike
   • DAsk employees to watch the door and challenge strangers
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A data center housing SCADA servers has a raised floor for cooling. A water leak from an overhead pipe is detected near a server rack. What is the immediate priority?

   • AShut off the water supply and move any equipment that is not already wet to a dry area
   • BCall the fire department to handle the water leak
   • CWait for the leak to stop on its own and then assess the damage
   • DPower down all servers immediately to prevent electrical shorts
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A data center hosting a SCADA historian is located in a region that experiences both hurricanes and extreme heat. The facility has a backup generator and a UPS, but the HVAC system is not connected to the generator. During a hurricane, power is lost and the generator starts, but the HVAC remains off. What is the most critical risk to the SCADA historian?

   • AThe backup generator will run out of fuel
   • BFlooding of the data center due to the hurricane
   • COverheating of the servers because the HVAC is not on backup power
   • DThe UPS batteries will drain quickly because the generator is not running
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which of the following best describes the role of physical security within an overall ICS security program?

   • AIt is the first line of defense that prevents unauthorized physical access to critical control equipment
   • BIt is only needed for the corporate IT network, not for ICS networks
   • CIt replaces the need for network security controls such as firewalls and intrusion detection
   • DIt is primarily responsible for encrypting data at rest and in transit
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A power utility is designing a new substation. The control building will house the SCADA RTUs and the network switch. The site is in a flood-prone area. Which facility design and layout measure should be prioritized to protect the SCADA equipment from flood damage?

   • AInstall a perimeter fence with barbed wire around the substation
   • BUse a backup generator with an automatic transfer switch
   • CPlace the control building on an elevated concrete pad above the known flood level
   • DAdd more CCTV cameras to monitor the substation perimeter
   Reveal Solution Discussion Select an answer first