Security Posture ICSSCADA Practice Questions (Page 9)

Questions 41–43

1. 41expert · hard · select all that apply

   A chemical plant has a security posture that is rated as 'average' in a recent assessment. The plant wants to improve its posture but has a limited budget and cannot afford a major overhaul. Which of the following strategies are COST-EFFECTIVE ways to improve the security posture? (Select all that apply.)

   • AImplementing a formal patch management process for OT systems
   • BReplacing all legacy PLCs with modern ones that support encryption
   • CConducting regular security awareness training for OT staff
   • DEnforcing strong password policies and MFA for all OT access
   • EDeploying a full SIEM solution with a dedicated security operations center
   Check answers Discussion Select an answer first
2. 42foundation · easy

   Which of the following is a best practice for improving the security posture of an ICS/SCADA network?

   • ASegmenting the network to isolate critical control systems from corporate IT systems.
   • BUsing the same password for all devices to simplify management.
   • CDisabling all security monitoring to reduce false alarms.
   • DConnecting all ICS/SCADA devices directly to the internet for easier remote access.
   Reveal Solution Discussion Select an answer first
3. 43application · medium

   A pipeline company wants to assess its security posture but has limited staff and cannot afford an external consultant. Which method is most practical for a self-assessment?

   • AWait for a security incident to reveal weaknesses.
   • BReview only the firewall logs for the past month.
   • CAsk vendors to assess the security of their own products only.
   • DUse a self-assessment checklist based on a recognized framework like NIST SP 800-82.
   Reveal Solution Discussion Select an answer first