Selecting and Applying Controls to Mitigate Risk ICSSCADA Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which monitoring control is specifically designed to detect anomalies in ICS network traffic that may indicate a security incident?

   • APatch management tool
   • BBackup system
   • CIntrusion detection system (IDS)
   • DFirewall
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A manufacturing plant uses a shared engineering workstation for programming PLCs. Several contractors have access to this workstation to troubleshoot production lines. The plant manager wants to ensure that only authorized personnel can modify PLC logic, while still allowing contractors to view diagnostics. Which control best meets this requirement?

   • ADisable the programming software on the workstation and require contractors to use a separate laptop.
   • BRequire all users to log in with a shared generic account that has full programming rights.
   • CImplement role-based access control on the workstation so that contractors have read-only access to the programming software, while full engineering staff can modify logic.
   • DPlace the workstation on a separate VLAN with no access to the PLC network.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A steel mill runs a legacy SCADA system that is critical for production. The vendor has released a security patch, but the patch is known to cause a brief interruption to the HMI polling service during installation. The mill operates 24/7 and cannot tolerate unplanned downtime. The security team has a maintenance window of 30 minutes every Sunday. Which approach best balances security and availability?

   • AApply the patch during the Sunday maintenance window, and have a rollback plan ready in case the patch causes issues.
   • BApply the patch to a test environment first, then skip the production patch if the test passes.
   • CApply the patch immediately without notifying operations, because security is the top priority.
   • DDo not apply the patch because the risk of downtime is too high.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A transportation authority operates a SCADA system for traffic control. A risk assessment identified that a disgruntled employee could physically access the control room and tamper with the equipment. Which control is most effective in mitigating this risk?

   • AAdd more security cameras in the control room.
   • BInstall a biometric access control system on the control room door and implement a visitor log.
   • CMove the control room to a remote location.
   • DImplement a policy that requires employees to wear ID badges.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A city's traffic management system uses a mix of wired and wireless connections to control traffic lights. The wireless connections are used for temporary construction zones. A risk assessment identified that the wireless links could be intercepted and manipulated. The city wants to mitigate this risk while maintaining the flexibility of temporary deployments. Which control is most appropriate?

   • ADisable wireless connections and require all traffic lights to be wired.
   • BUse a simple password on the wireless network to deter casual attackers.
   • CUse encrypted wireless protocols with strong authentication and implement a firewall to restrict access to the traffic control network.
   • DMonitor the wireless network with an IDS but do not change the configuration.
   Reveal Solution Discussion Select an answer first