Configuration Change Management and Vulnerability Assessments GCIP Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A manufacturing company has a policy that all removable media must be scanned for malware before use. However, the scanning station is located in a different building, and operators often skip the scan to save time. What is the most effective solution?

   • AIncrease the frequency of security awareness training for operators
   • BMove the scanning station closer to the operators to make it more convenient
   • CImplement a technical control that blocks the use of removable media unless it has been scanned and approved
   • DAllow operators to use personal USB drives if they are in a hurry
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the primary purpose of a vulnerability assessment?

   • ATo ensure that no vulnerabilities exist in any system
   • BTo identify and prioritize security weaknesses in systems
   • CTo replace the need for security monitoring
   • DTo exploit vulnerabilities to demonstrate impact
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A water utility's SCADA engineer needs to update the firmware on a remote terminal unit (RTU) that controls a chlorine dosing pump. The change window is tight, and the engineer proposes to bypass the formal change request because the update is a vendor-recommended security patch. The plant manager wants to ensure system integrity and auditability. What is the most appropriate action?

   • AExpedite a formal change request with pre-approval from the change advisory board, then implement and document the change.
   • BApprove the bypass and document the change after implementation to meet the deadline.
   • CDefer the patch until the next scheduled maintenance window, regardless of the security risk.
   • DImplement the patch immediately and rely on configuration monitoring to detect any issues afterward.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A manufacturing company is planning a vulnerability assessment of its industrial control system (ICS) network. The assessment team includes external consultants who will use active scanning tools. The plant manager is concerned about disrupting production. What is the most appropriate approach?

   • AUse passive monitoring techniques to identify vulnerabilities without sending traffic to production systems.
   • BPerform active scans only on IT systems and rely on vendor documentation for ICS devices.
   • CDisconnect the ICS network from the corporate network before scanning to prevent any impact.
   • DRun active scans during a scheduled maintenance outage to avoid impacting production.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A power utility has a strict policy that all USB drives must be encrypted and centrally managed. However, a contractor needs to transfer a large data file from a control system to a vendor for analysis. The vendor does not support encrypted drives. What is the best compromise?

   • AAsk the vendor to accept the data on a CD-ROM instead of a USB drive
   • BUse a secure file transfer protocol over a temporary network connection to send the file to the vendor
   • CAllow the contractor to use an unencrypted USB drive for this one-time transfer
   • DEncrypt the file with a password and send it via email to the vendor
   Reveal Solution Discussion Select an answer first