Security Posture ICSSCADA Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A chemical plant is updating its security posture and wants to ensure that its safety instrumented systems (SIS) remain highly available while improving security. The team is considering several initiatives. Which initiative BEST balances security improvement with the availability requirements of the SIS?

   • AApply all security patches to the SIS controllers during the next scheduled maintenance window
   • BDisconnect the SIS from the control network to eliminate all external attack vectors
   • CDeploy an active-passive firewall pair with automatic failover between the SIS and the control network
   • DImplement network monitoring that passively observes SIS traffic without inline blocking
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A pharmaceutical company is defining its security posture and wants to ensure that all components are considered. Which set of components best represents the key elements of security posture?

   • APolicies, controls, and risk management.
   • BFirewalls, antivirus, and intrusion detection systems.
   • CCompliance reports, audit logs, and insurance policies.
   • DEmployees, contractors, and vendors.
   Reveal Solution Discussion Select an answer first
4. 38expert · hard

   A large hospital has a building management system (BMS) that is connected to the IT network for remote monitoring. The security team wants to improve the security posture but faces resistance from facilities management, who worry that segmentation will slow down their remote access. What is the best approach to balance security and operational needs?

   • AMove the BMS to a separate VLAN but allow direct remote access from the IT network.
   • BImplement a demilitarized zone (DMZ) with a jump host for remote access to the BMS.
   • CRemove remote access entirely to ensure security.
   • DKeep the BMS on the IT network and rely on the existing firewall.
   Reveal Solution Discussion Select an answer first
5. 39expert · hard

   A regional electrical utility has a mature security posture with strong segmentation, MFA, and continuous monitoring. However, the OT team is concerned about the risk of a supply-chain attack via firmware updates from a third-party vendor. The utility has a strict change-management process that requires all firmware updates to be tested in a lab before deployment. The vendor has announced a critical firmware update for a widely used RTU. The update addresses a remote code execution vulnerability. The utility's lab is currently unavailable for two weeks due to maintenance. The vulnerability is being actively exploited in the wild. What is the BEST course of action?

   • AWait for the lab to become available and then test the update before deployment
   • BApply compensating controls, such as enhanced network monitoring and access restrictions, while expediting lab testing
   • CDisconnect all RTUs from the network until the firmware update is tested
   • DDeploy the firmware update immediately to all RTUs without lab testing to close the critical vulnerability
   Reveal Solution Discussion Select an answer first
6. 40expert · hard

   A nuclear research facility has a security posture that includes strict access control, continuous monitoring, and a robust patch management program. However, the facility is planning to decommission an old research reactor and replace it with a new digital control system. The security team must ensure that the security posture is maintained during the transition. Which action is MOST critical?

   • ATrain all operators on the new control system's security features
   • BConduct a security assessment of the new control system after it is fully operational
   • CEnsure that the new control system is integrated into the existing security monitoring and access control systems
   • DRemove the old reactor's control system from the network immediately after decommissioning
   Reveal Solution Discussion Select an answer first