Risk Management in ICS/SCADA ICSSCADA Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A hospital's building management system (BMS) controls HVAC and access. The IT department wants to apply standard IT security patches immediately, but the facilities team warns that some patches may disrupt critical equipment. What is the primary consideration in this risk management decision?

   • AApply all patches immediately to reduce cyber risk.
   • BLet the IT department decide without consulting facilities.
   • CIgnore IT security concerns because the BMS is isolated.
   • DPrioritize operational continuity and safety of the BMS over immediate patching.
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A pipeline operator has a risk monitoring program that relies on periodic manual reviews of security logs. The program has been effective, but the operator is concerned about the increasing sophistication of threats and the need for faster detection. Which improvement would most effectively enhance the risk monitoring program?

   • ADeploy an intrusion detection system (IDS) that generates alerts based on known attack patterns and integrate it with the log review process
   • BIncrease the frequency of manual log reviews from monthly to weekly
   • CDisable logging to reduce the amount of data that needs to be reviewed
   • DHire more security analysts to manually review logs in real time
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which of the following is an example of an administrative control for mitigating risk in an ICS/SCADA environment?

   • AImplementing a security awareness training program for operators
   • BUsing biometric access controls to the control room
   • CEncrypting communication between PLCs and the HMI
   • DInstalling a firewall between the IT and OT networks
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A power plant allows third-party vendors to remotely access the control network for maintenance. The remote access solution uses a shared password and does not require multi-factor authentication. Which risk mitigation control would be most effective to reduce the risk of unauthorized remote access?

   • AUse a more complex shared password and change it quarterly
   • BMonitor remote access logs after incidents occur
   • CDisable remote access entirely and require vendors to be on-site for all maintenance
   • DImplement multi-factor authentication and unique credentials for each vendor
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A large chemical plant is conducting a risk assessment for its distributed control system (DCS). The plant has a complex network with many assets, and the risk team has limited time and budget. They need to identify the most critical risks quickly. Which approach is most efficient?

   • AUse only a qualitative assessment and skip quantitative analysis.
   • BStart with a qualitative assessment to identify high-level risks, then perform detailed quantitative analysis on the top risks.
   • CPerform a full quantitative assessment on all assets.
   • DRely on a third-party vendor's risk report without internal assessment.
   Reveal Solution Discussion Select an answer first