Security Posture ICSSCADA Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A hospital's building management system (BMS) was found to have default credentials on several controllers. The security team wants to assess the overall security posture of the BMS network. Which action should be part of the assessment?

   • AImmediately change all default credentials and move on
   • BReview the BMS network architecture and identify all connected devices
   • CDisconnect the BMS from the network to prevent further exposure
   • DReplace all BMS controllers with newer models
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which of the following best illustrates the role of risk management in an organization's security posture?

   • AEliminating all risks so that no security incidents can occur.
   • BIdentifying, assessing, and prioritizing risks to guide the selection of security controls.
   • CPurchasing the most expensive security products available on the market.
   • DEnsuring that all security controls are implemented identically across all industries.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   An energy company wants to assess the current security posture of its ICS environment without disrupting production. They have a limited budget and need a baseline that identifies gaps against industry best practices. Which approach is most appropriate?

   • AInterview only the IT staff to understand the security controls in place.
   • BDeploy a new SIEM solution and wait six months to collect enough data for analysis.
   • CPerform a gap analysis against a recognized ICS security framework, such as IEC 62443 or NIST SP 800-82.
   • DConduct a full penetration test on all live ICS systems during peak production hours.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A manufacturing plant has a mature set of security policies and has invested in firewalls, IDS, and antivirus. However, during a recent audit, the assessor noted that the plant's security posture is weaker than expected. Which factor is MOST likely contributing to this discrepancy?

   • AThe plant's security policies are not reviewed annually
   • BThe plant's OT network is not connected to the internet
   • CThe plant has not implemented a formal risk management process
   • DThe plant uses a mix of legacy and modern PLCs from different vendors
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A water treatment plant's OT manager wants to communicate the current security posture to the board. The plant has a firewall between IT and OT, but no documented policies, and the last risk assessment was three years ago. Which statement best describes the plant's security posture?

   • AUnknown, because security posture can only be determined by an external penetration test.
   • BWeak, because the absence of documented policies and an outdated risk assessment indicate gaps in governance and risk management.
   • CStrong, because the firewall provides a technical control that protects the OT network.
   • DModerate, because the firewall is a compensating control that offsets the lack of policies.
   Reveal Solution Discussion Select an answer first