Security Posture ICSSCADA Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A power utility is assessing its security posture and wants to identify weaknesses that could be exploited by an attacker with remote access to the corporate network. Which assessment method is MOST appropriate for this scenario?

   • AA review of the organization's security policies and procedures
   • BA vulnerability scan of all internet-facing systems
   • CA physical security assessment of the plant perimeter
   • DA penetration test that starts from the corporate network and attempts to reach OT systems
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A natural gas distribution company has a security posture that relies heavily on perimeter firewalls and antivirus. The security manager wants to improve the posture by adding a control that addresses the insider threat and compromised credentials. Which control would BEST address this gap?

   • AAdd a second perimeter firewall in series
   • BConduct annual security awareness training for all employees
   • CImplement multi-factor authentication (MFA) for all remote and local OT access
   • DIncrease the frequency of antivirus signature updates
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A water treatment plant is developing a new security posture. The team has identified the following components: a password policy, a firewall rule set, and a risk assessment report. Which additional component is ESSENTIAL to complete the security posture framework?

   • AA documented incident response plan
   • BA schedule for preventive maintenance of the pumps
   • CA list of all OT equipment vendors and their support contacts
   • DA backup of the HMI configuration files
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A power utility is updating its security posture and has to choose between investing in a new SIEM system or developing a comprehensive security policy framework. The utility has a mature technical team but lacks formal policies. Which investment is more likely to improve the overall posture?

   • ABoth are equally important, so the utility should split the budget.
   • BNeither, because the utility should focus on hiring more security staff.
   • CThe policy framework, because it establishes governance and guides the effective use of technical controls.
   • DThe SIEM system, because it provides real-time monitoring and detection.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A mining company is developing a security posture for its new remote operations center. The center will monitor and control equipment at multiple mine sites. Which combination of components is ESSENTIAL for a strong security posture?

   • AAn IDS, a patch management system, and a backup of the control software
   • BA security policy, access control measures, and a risk management process
   • CA firewall, an antivirus, and a backup generator
   • DA VPN, a SIEM, and a disaster recovery site
   Reveal Solution Discussion Select an answer first