Electronic Security Perimeter(s) GCIP Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A utility has a dial-up modem connected to a remote terminal unit (RTU) for emergency access. The modem is used rarely, but when used, it must be secure. The security team decides to implement callback authentication. What additional control is essential?

   • AUse a toll-free number for the modem.
   • BUse a longer phone number.
   • CLog all dial-up sessions and review them periodically.
   • DDisable the modem when not in use.
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A power utility needs to allow a vendor to access a historian server inside the ESP for troubleshooting. The vendor should not have direct access to the control network. Which intermediate system should be used?

   • AA port-forwarding rule on the firewall to the historian server.
   • BA direct VPN connection from the vendor's laptop to the historian server.
   • CA jump server in a DMZ that the vendor can access, which then connects to the historian server.
   • DA remote desktop connection directly to the historian server.
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   Which tool is specifically designed to detect malicious communication by analyzing network traffic for known attack patterns?

   • AConfiguration management database (CMDB)
   • BPatch management tool
   • CVulnerability scanner
   • DIntrusion detection system (IDS)
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   Why are dial-up connections considered a significant security risk to an Electronic Security Perimeter (ESP)?

   • AThey use weak encryption that is easily broken
   • BThey are always slower than network connections, causing timeouts
   • CThey can bypass the electronic access point and create an unmonitored path into the ESP
   • DThey require special hardware that is difficult to secure
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A nuclear facility allows a small group of engineers to perform interactive remote access to HMI systems inside the ESP from home. The current setup uses a VPN with username/password only. Management wants to strengthen security without losing the ability to troubleshoot after hours. Which control should be added first?

   • ARequire multi-factor authentication for all remote sessions.
   • BDisable interactive remote access and require on-site presence for all changes.
   • CRestrict remote access to business hours only.
   • DIncrease the password length to 20 characters.
   Reveal Solution Discussion Select an answer first