Configuration Change Management and Vulnerability Assessments GCIP Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A vulnerability assessment of a chemical plant's control network is scheduled. The assessment team plans to use a network scanner to identify open ports and services. What is a critical consideration before running the scan?

   • AEnsure the scan is approved by management and scheduled during a maintenance window to avoid disrupting operations
   • BUse the most aggressive scan settings to get the most complete results in the shortest time
   • CDisable the firewall on the scanner to ensure it can communicate with all devices
   • DRun the scan from a laptop that is not connected to the control network to avoid detection
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   In a formal change management process, which step typically occurs immediately after the change request is submitted and before the change is approved?

   • APost-implementation review
   • BImpact and risk assessment
   • CImplementation of the change
   • DRollback planning
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which activity is a key purpose of documenting changes in a formal change management process?

   • ATo provide a historical record for auditing and troubleshooting
   • BTo automatically approve future changes of the same type
   • CTo ensure that no unauthorized changes are ever made
   • DTo eliminate the need for testing after implementation
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A change request is submitted to update the configuration of a firewall in a manufacturing facility. The change is approved and implemented. After implementation, the network team notices that the firewall is blocking legitimate traffic to a production database. What is the first step in the change management process that should be taken?

   • AContact the firewall vendor for support before making any changes
   • BDocument the issue in the change record and continue monitoring
   • CInitiate a rollback plan to revert the firewall to its previous configuration
   • DSubmit a new change request to fix the firewall rules
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A pipeline company allows contractors to bring their own laptops to perform maintenance on the SCADA system. The laptops are transient cyber assets and are not subject to the company's configuration monitoring. A recent incident involved a contractor's laptop introducing malware that spread to the SCADA network. The company wants to continue using contractors but prevent a recurrence. What is the most effective solution that balances security and operational needs?

   • ASet up a dedicated 'contractor VLAN' with strict access controls and require a pre-connection vulnerability scan of each laptop.
   • BAsk contractors to sign a security agreement acknowledging the risks.
   • CRequire contractors to use company-provided laptops that are fully managed and monitored.
   • DProhibit contractors from connecting to the SCADA network and require them to work under the supervision of company staff.
   Reveal Solution Discussion Select an answer first