Risk Management in ICS/SCADA ICSSCADA Practice Questions (Page 8)

Questions 36–40

1. 36foundation · easy

   Why is continuous risk monitoring important in an ICS/SCADA environment?

   • ATo guarantee that no security incidents will occur
   • BTo ensure that risks remain within acceptable levels as threats and systems change
   • CTo replace the need for periodic risk assessments
   • DTo eliminate the need for security controls
   Reveal Solution Discussion Select an answer first
2. 37expert · hard

   A risk assessment for a nuclear facility identified a high risk of a cyber attack on the cooling system. The safety committee wants to understand the risk in terms of public safety, while the finance department wants to know the potential financial loss. How should the risk be communicated to both groups?

   • AProvide a technical report with all details to both groups.
   • BFocus only on the financial impact, as it is easier to quantify.
   • CPrepare two separate reports: one focusing on safety and one on financial impact.
   • DPresent a single report with only the risk score.
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   What is the primary purpose of documenting risk assessment findings in an ICS/SCADA environment?

   • ATo satisfy the requirements of all regulatory bodies
   • BTo replace the need for ongoing risk monitoring
   • CTo provide a basis for decision-making and to demonstrate due diligence
   • DTo create a record for legal proceedings
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A power plant's control network uses DNP3 for communication with remote field devices. The risk assessment identified that DNP3 lacks authentication, allowing an attacker to inject false data. The plant cannot upgrade to DNP3 Secure Authentication in the near term. Which control is most effective to mitigate this risk?

   • AIncrease the frequency of DNP3 polling to detect anomalies faster.
   • BDisable DNP3 and use a proprietary protocol.
   • CDeploy an inline security appliance that validates DNP3 messages and blocks anomalous traffic.
   • DEncrypt all DNP3 traffic with a VPN.
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   Which of the following is a common vulnerability specific to ICS/SCADA networks?

   • ARegular patching of all control system components
   • BLegacy protocols such as Modbus that lack authentication
   • CUse of modern operating systems with built-in security
   • DUse of encrypted communication protocols like TLS
   Reveal Solution Discussion Select an answer first