Security Posture ICSSCADA Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A chemical plant has a weak security posture due to inconsistent patch management and lack of network segmentation. The plant manager wants to improve the posture with minimal disruption to production. Which strategy should be prioritized?

   • AReplace all legacy ICS devices with modern ones immediately.
   • BImmediately apply all available patches to every ICS device during the next maintenance window.
   • CImplement network segmentation between IT and OT, and develop a risk-based patch management plan.
   • DDisconnect the ICS from the internet and rely solely on air-gapping.
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   A natural gas company has a security posture assessment that shows several high-risk findings, but the budget only allows fixing one finding this year. The findings are: (1) lack of network segmentation, (2) outdated antivirus on operator workstations, (3) no incident response plan, and (4) unencrypted remote access. Which finding should be prioritized to have the most significant impact on the overall posture?

   • AUnencrypted remote access.
   • BNo incident response plan.
   • COutdated antivirus on operator workstations.
   • DLack of network segmentation.
   Reveal Solution Discussion Select an answer first
4. 33expert · hard

   A manufacturing company has a strong security posture but is concerned about the cost of maintaining it. They are considering reducing the frequency of security assessments from annually to every three years to save money. What is the most important consideration before making this change?

   • AThe company's security posture is strong enough that assessments are no longer necessary.
   • BThe threat landscape and the ICS environment change over time, so less frequent assessments may miss new vulnerabilities.
   • CThe company's insurance policy will cover any losses from a security incident.
   • DThe company can rely on the vendor's security updates to cover any gaps.
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   Which method is commonly used to assess the current security posture of an ICS/SCADA environment?

   • AMeasuring the physical temperature of the server room.
   • BReviewing the organization's marketing materials for security claims.
   • CConducting a vulnerability assessment that scans for known weaknesses in the system.
   • DCounting the number of security patches released by vendors each year.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A manufacturing company is reviewing its ICS security posture. They have a detailed incident response plan, but their access control policy is outdated and they have not performed a risk assessment since the last plant expansion. Which component is most directly weakening their security posture?

   • AThe company has not implemented a security information and event management (SIEM) system.
   • BThe company lacks a firewall between IT and OT networks.
   • CThe incident response plan is not updated to reflect the new plant layout.
   • DThe access control policy is outdated and the risk assessment has not been updated after significant changes.
   Reveal Solution Discussion Select an answer first