Configuration Change Management and Vulnerability Assessments GCIP Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   Which of the following is an example of a transient cyber asset in an industrial control system environment?

   • AA technician's laptop temporarily connected for diagnostics
   • BA firewall that is always on the network
   • CA network switch that is part of the permanent infrastructure
   • DA permanently installed server running the control system
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   During a routine inspection at a substation, a technician connects a laptop to the control network to run a diagnostic test. The laptop is not part of the inventory and has not been scanned for vulnerabilities. After the test, the technician disconnects the laptop and leaves. What is the primary risk introduced by this transient cyber asset?

   • AThe laptop will consume network bandwidth and slow down the control system
   • BThe technician may accidentally change the configuration of the laptop
   • CThe laptop may introduce malware or unpatched vulnerabilities into the control network during the connection
   • DThe laptop will create a permanent network connection that attackers can exploit
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A hospital's facilities management system (FMS) needs a new security patch for its building automation controller. The change advisory board (CAB) is concerned about the patch affecting the HVAC system in the operating rooms. What should the change request include to address this concern?

   • AA list of all other systems that will be affected by the patch.
   • BA request to apply the patch without testing to meet the vendor's deadline.
   • CA rollback plan and a detailed risk assessment of the patch's impact on the HVAC system.
   • DA plan to install the patch during off-hours without notifying the CAB.
   Reveal Solution Discussion Select an answer first
5. 34expert · hard

   A configuration monitoring system in a nuclear facility has a high rate of false positives because routine maintenance activities trigger alerts. The security team is overwhelmed and has started ignoring alerts. What is the most effective way to improve the situation?

   • AHire more security analysts to review the alerts manually
   • BIncrease the frequency of configuration monitoring to catch more changes
   • CImplement a change management process that logs all approved maintenance activities and correlate them with monitoring alerts
   • DDisable alerts for maintenance-related changes to reduce the noise
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   Which activity is typically part of a vulnerability assessment process?

   • ADisabling all unnecessary services
   • BDeploying patches immediately after scanning
   • CExploiting vulnerabilities to gain access
   • DScanning systems for known vulnerabilities
   Reveal Solution Discussion Select an answer first