Electronic Security Perimeter(s) GCIP Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the primary purpose of traffic analysis in detecting malicious communication within an Electronic Security Perimeter (ESP)?

   • ATo identify anomalies or patterns that indicate potential malicious activity
   • BTo replace the need for intrusion detection systems
   • CTo block all traffic that is not explicitly allowed
   • DTo encrypt all communication crossing the ESP
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A water utility's ESP includes a control network with PLCs that must receive unsolicited commands from a vendor's external server via a routable protocol. The security team wants to minimize exposure while allowing this specific communication. What is the most appropriate access rule approach?

   • AConfigure the firewall to permit all inbound traffic from any external IP to the PLC subnet to ensure vendor connectivity is never interrupted.
   • BPlace the vendor server inside the ESP and allow all traffic between it and the PLCs without access rules.
   • CPermit all outbound traffic from the ESP and permit inbound responses only to established sessions.
   • DCreate a rule that permits inbound traffic from the vendor's IP address to the specific PLC IP address on the required protocol port, and deny all other inbound traffic.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which security measure is essential for interactive remote access sessions into an Electronic Security Perimeter (ESP)?

   • ADisabling encryption to reduce latency
   • BSession monitoring and logging to track user activity
   • CAllowing unlimited concurrent sessions to improve productivity
   • DUsing shared accounts for simplicity
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which of the following is an example of an intermediate system within an Electronic Security Perimeter (ESP)?

   • AA proxy server that relays requests between external clients and internal servers
   • BA power supply unit (PSU) that provides electricity to a server
   • CA backup tape drive used for data archiving
   • DA network switch that forwards frames within the same VLAN
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   When external routable communication crosses an Electronic Security Perimeter (ESP), what is the primary security requirement?

   • AAll traffic must be encrypted using a VPN
   • BAll traffic must pass through an electronic access point that enforces access rules
   • CAll traffic must be routed through a proxy server
   • DAll traffic must be logged and reviewed weekly
   Reveal Solution Discussion Select an answer first