Security Posture ICSSCADA Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the primary purpose of a security audit when assessing an ICS/SCADA environment's security posture?

   • ATo evaluate whether security controls and policies are implemented and operating effectively.
   • BTo replace all existing security controls with new ones.
   • CTo determine the exact cost of every security incident that has occurred.
   • DTo provide a legal defense against all future cyber attacks.
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A transportation authority operates a SCADA system for traffic control. The system has a strong security posture with network segmentation, MFA, and regular audits. However, the authority is planning to connect the SCADA system to a new public-facing mobile app that allows citizens to report traffic incidents. The connection will require a data exchange between the SCADA system and the app's cloud backend. What is the MOST important security consideration for maintaining the SCADA system's security posture?

   • AImplement a secure, controlled interface that allows only the necessary data to flow between the SCADA system and the cloud backend
   • BConduct a penetration test of the mobile app before launch
   • CEnsure that the cloud backend is compliant with industry standards
   • DDisable the mobile app feature until the SCADA system can be completely isolated from the internet
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   In the context of ICS/SCADA network defense, which statement best defines an organization's security posture?

   • AThe overall strength of the organization's security defenses, including its policies, controls, and readiness to respond to threats.
   • BThe physical security measures in place at ICS/SCADA facilities.
   • CThe specific number of security tools deployed across the ICS/SCADA network.
   • DThe level of compliance with a single industry standard, such as IEC 62443.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A utility company is assessing its security posture and discovers that its ICS network has many undocumented devices and no inventory of authorized hardware. Which assessment activity is most critical to perform first?

   • AConduct a network discovery and create an inventory of all ICS devices.
   • BDevelop a new security policy for device management.
   • CImmediately disconnect all undocumented devices from the network.
   • DInstall antivirus software on all ICS workstations.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A pharmaceutical manufacturer is planning to assess its security posture. The plant operates 24/7 and cannot tolerate downtime. Which assessment approach is MOST suitable for this environment?

   • AA social engineering test targeting all plant operators
   • BA passive vulnerability assessment using network traffic analysis and configuration reviews
   • CA full penetration test that includes attempts to disrupt live processes
   • DAn active vulnerability scan of all PLCs during peak production
   Reveal Solution Discussion Select an answer first