An IT administrator proposes applying standard IT patch management policies to a pharmaceutical manufacturing plant's OT network. The OT team rejects the proposal. Which operational priority best justifies the OT team's decision?

Ensuring continuous production and process safety takes precedence over immediate security patching

OT networks are isolated and do not require any security updates

Data confidentiality is the primary security objective in OT environments

OT systems require immediate application of all security patches without testing

A water utility is replacing its SCADA system. The new system will use OPC UA to connect HMIs to PLCs. The old system used Modbus TCP. The control engineer is concerned that OPC UA introduces new security features but also new complexity. The utility has a small IT staff and limited budget. What is the most important factor to consider when deciding whether to use OPC UA?

The compatibility with existing PLCs

The staff's ability to manage OPC UA certificates and security configurations

The speed of OPC UA compared to Modbus TCP

Which characteristic is more critical for ICS than for typical IT systems?

User-friendly graphical interfaces

Real-time deterministic response

High data throughput for large files

GIAC Global Industrial Cyber Security Professional

Domain 1Objective 2

ICS Overview & Concepts GICSP Practice Questions (Page 4)

Part of the ICS Fundamentals and Architecture domain, which makes up ~40% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~28–48 in this domain), expect 7–12 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

7concepts

Questions 16–20

16foundation · easy
In a typical ICS layered architecture, which level contains sensors and actuators that directly interact with the physical process?
Select an answer first
17application · medium
An IT administrator proposes applying standard IT patch management policies to a pharmaceutical manufacturing plant's OT network. The OT team rejects the proposal. Which operational priority best justifies the OT team's decision?
Select an answer first
18expert · hard
A water utility is replacing its SCADA system. The new system will use OPC UA to connect HMIs to PLCs. The old system used Modbus TCP. The control engineer is concerned that OPC UA introduces new security features but also new complexity. The utility has a small IT staff and limited budget. What is the most important factor to consider when deciding whether to use OPC UA?
Select an answer first
19foundation · easy
Which characteristic is more critical for ICS than for typical IT systems?
Select an answer first
20foundation · easy
Which ICS component is used by an operator to view process data and issue commands?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GICSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GICSP” is a trademark of its owner, used for identification only.

ICS Overview & Concepts GICSP Practice Questions (Page 4)

Questions 16–20

In a typical ICS layered architecture, which level contains sensors and actuators that directly interact with the physical process?

An IT administrator proposes applying standard IT patch management policies to a pharmaceutical manufacturing plant's OT network. The OT team rejects the proposal. Which operational priority best justifies the OT team's decision?

Which characteristic is more critical for ICS than for typical IT systems?

Which ICS component is used by an operator to view process data and issue commands?

Keep studying — ICS Fundamentals and Architecture