Electronic Security Perimeter(s) GCIP Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which of the following is an example of multi-factor authentication (MFA)?

   • ATwo different passwords
   • BA smart card and a PIN
   • CA fingerprint and a retina scan
   • DA username and a password
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is a common security role of an intermediate system, such as a gateway, within an ESP?

   • AAssigning IP addresses to devices on the network
   • BProviding power redundancy to critical devices
   • CEnforcing security policies by inspecting and filtering traffic
   • DStoring backup copies of all data transmitted
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A chemical plant's ESP firewall currently has a rule that permits all outbound traffic from the control network to the internet. The security team wants to reduce risk but the plant's control system vendor requires outbound HTTPS access to their cloud service for firmware updates. The team is considering implementing a proxy for outbound traffic. What is the most important consideration?

   • AThe proxy should be placed outside the ESP to avoid affecting control system traffic.
   • BThe proxy should allow all outbound traffic to avoid disrupting vendor access.
   • CThe proxy should be configured to log all traffic but not filter it.
   • DThe proxy must support HTTPS inspection to allow the vendor's cloud service to function.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A utility's ESP allows interactive remote access via a VPN. The security team wants to implement multi-factor authentication, but the remote users are a mix of employees and contractors. The contractors do not have corporate-issued devices. What is the best approach to implement MFA for all users?

   • ARequire all users to use mobile app push notifications.
   • BExempt contractors from MFA because they are not full-time employees.
   • CUse a single MFA solution that supports both hardware tokens and mobile app push notifications.
   • DRequire all users to use hardware tokens, regardless of device ownership.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A water utility has a dial-up modem connected to a pump station for emergency backup. The modem is the only way to access the pump station if the primary network fails. The security team wants to implement multi-factor authentication, but the pump station has no power backup for additional hardware. What is the most practical approach?

   • ARequire a callback to a pre-configured number as the second factor.
   • BDisable the modem and rely on the primary network.
   • CUse a hardware token that does not require power at the pump station, such as a one-time password generator.
   • DUse a shared secret that is changed monthly.
   Reveal Solution Discussion Select an answer first