TCP/IP Protocol Architecture ICSSCADA Practice Questions (Page 7)

Questions 31–35

1. 31expert · hard

   A network administrator is configuring a firewall to allow a remote engineer to access an HMI via Remote Desktop (RDP) over the internet. The HMI is behind a NAT. Which configuration is the most secure and functional?

   • AForward all TCP ports from the firewall's public IP to the HMI's private IP.
   • BPlace the HMI in the DMZ with a public IP address and no firewall rules.
   • CForward TCP port 3389 from the firewall's public IP to the HMI's private IP, and restrict the source IP to the engineer's public IP.
   • DForward UDP port 3389 from the firewall's public IP to the HMI's private IP.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which layer of the TCP/IP model is responsible for routing packets across different networks and assigning logical addresses to hosts?

   • AInternet layer
   • BNetwork access layer
   • CTransport layer
   • DApplication layer
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   Which protocol is commonly used to test network connectivity by sending echo request and echo reply messages?

   • AICMP
   • BDNS
   • CFTP
   • DSMTP
   Reveal Solution Discussion Select an answer first
5. 34expert · hard

   A utility company is deploying a new substation automation system. The system uses IPv6 for new devices, but must maintain compatibility with legacy IPv4 devices. The engineer needs to ensure that the new IPv6 devices can communicate with the legacy IPv4 devices. Which approach should the engineer use?

   • AUse NAT64 to translate IPv6 packets to IPv4.
   • BUse IPv6-to-IPv4 tunneling to encapsulate IPv6 packets in IPv4.
   • CUse DHCPv6 to assign IPv4 addresses to IPv6 devices.
   • DUse dual-stack networking so devices can use both IPv4 and IPv6.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   An engineer is configuring a new remote terminal unit (RTU) that sends periodic sensor readings to a central SCADA server. The readings are time-sensitive but a few lost packets are acceptable because the next reading will overwrite the previous one. The RTU also needs to receive occasional configuration updates from the server, where every update must be delivered reliably. Which transport protocol combination should the engineer use?

   • AUDP for both sensor readings and configuration updates
   • BUDP for sensor readings and TCP for configuration updates
   • CTCP for sensor readings and UDP for configuration updates
   • DTCP for both sensor readings and configuration updates
   Reveal Solution Discussion Select an answer first