Selecting and Applying Controls to Mitigate Risk ICSSCADA Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A manufacturing company has multiple identical PLCs running the same firmware. A new firmware version fixes a critical vulnerability but changes the default IP addressing scheme. The company wants to minimize the risk of misconfiguration during the update. What is the best approach?

   • ASkip the firmware update because the IP addressing change is too disruptive.
   • BUpdate the PLCs but do not change the IP configuration, assuming the firmware will preserve it.
   • CUpdate all PLCs simultaneously to save time and reduce the window of vulnerability.
   • DUpdate one PLC in a test environment, verify all functions, then roll out the firmware to the remaining PLCs using a documented change management process.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which of the following BEST describes the defense-in-depth strategy for ICS networks?

   • AImplementing multiple layers of security controls so that if one fails, others still provide protection
   • BUsing a single strong firewall at the network perimeter
   • CUsing the same security control across all network zones
   • DRelying on physical security to protect all ICS assets
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A chemical plant wants to implement a defense-in-depth strategy to protect its safety instrumented system (SIS) from cyber threats. The SIS is critical and cannot be modified with software agents. Which combination of controls best achieves defense-in-depth for the SIS?

   • APlace the SIS behind a firewall, use a data diode for one-way communication, and restrict physical access to the SIS cabinet.
   • BInstall antivirus software on the SIS controller and enable automatic updates.
   • CConnect the SIS directly to the corporate network for easier monitoring and management.
   • DUse a single firewall to protect all control system components, including the SIS.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Why is patch management particularly challenging in ICS environments?

   • APatch management is not required for ICS security
   • BICS systems are typically not connected to the internet, so patches cannot be downloaded
   • CICS vendors do not provide patches for their products
   • DPatches may disrupt the availability or functionality of critical control systems
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the PRIMARY purpose of security monitoring in an ICS environment?

   • ATo replace the need for other security controls
   • BTo prevent all cyber attacks from occurring
   • CTo identify and respond to security incidents in a timely manner
   • DTo ensure compliance with all industry regulations
   Reveal Solution Discussion Select an answer first