Selecting and Applying Controls to Mitigate Risk ICSSCADA Practice Questions (Page 10)

Questions 46–47

1. 46application · medium

   A manufacturing plant uses a shared engineering account to access the SCADA system. After a recent security audit, management wants to enforce individual accountability and least privilege. The plant has a Windows Active Directory domain for IT, but the SCADA system uses a separate authentication database. What should you implement to meet the requirement?

   • AIntegrate the SCADA system with Active Directory using LDAP and grant all engineers domain admin rights.
   • BCreate individual user accounts in the SCADA system with role-based permissions and require multi-factor authentication for remote access.
   • CUse the same password for all SCADA accounts to simplify management and reduce help desk calls.
   • DKeep the shared account but change the password monthly and share it only with senior engineers.
   Reveal Solution Discussion Select an answer first
2. 47foundation · easy

   What is the purpose of configuration management in an ICS environment?

   • ATo ensure that systems are configured securely and consistently, reducing vulnerabilities
   • BTo replace the need for patch management
   • CTo provide physical security for control room equipment
   • DTo increase the processing speed of PLCs
   Reveal Solution Discussion Select an answer first