ICS Overview & Concepts GICSP Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A chemical plant wants to improve cybersecurity by adding an intrusion detection system (IDS) to its OT network. The plant uses a mix of legacy and modern controllers, and the process is highly sensitive to network latency. The security team proposes placing the IDS inline between the controllers and the HMI. The OT team objects. What is the most likely reason for the OT team's objection?

   • AThe IDS would generate too many false positives, overwhelming the security team
   • BAn inline IDS could introduce latency or become a single point of failure, disrupting process control
   • CThe IDS would not be able to parse the proprietary protocols used by the legacy controllers
   • DThe IDS would require frequent updates, causing downtime
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which security challenge is unique to ICS compared to traditional IT systems?

   • AThe need to manage user passwords
   • BThe need to encrypt data at rest
   • CThe need to prioritize availability and safety over confidentiality
   • DThe need to protect against phishing attacks
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A chemical plant has a 20-year-old PLC controlling a critical exothermic reaction. The PLC is not network-connected and uses a proprietary programming language. The plant's management wants to improve cybersecurity. What is the most significant security challenge specific to this legacy ICS component?

   • AThe PLC's proprietary language makes it difficult for IT security tools to scan it
   • BThe PLC lacks modern security features and cannot be easily patched or monitored
   • CThe PLC is vulnerable to internet-based attacks because it is not connected to the network
   • DThe PLC requires frequent firmware updates to maintain security
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A refinery operator notices that a pressure relief valve is stuck closed. The safety system is designed to open this valve if pressure exceeds a threshold. What is the most immediate safety implication of this condition?

   • AThe product quality will degrade due to incorrect pressure
   • BThe process could overpressurize, leading to a rupture or explosion
   • CThe HMI will display an error message to the operator
   • DThe process will automatically shut down to prevent damage
   Reveal Solution Discussion Select an answer first
6. 25expert · medium

   A manufacturing plant is designing a new production line. The control system will use a PLC for each machine, a supervisory HMI for the line, and a historian for data collection. The plant also wants to integrate with the ERP system for inventory tracking. The network architect must decide where to place the historian. What is the best placement?

   • AOn the field layer, directly connected to sensors
   • BOn the control layer, embedded in each PLC
   • COn the enterprise layer, directly connected to the ERP
   • DOn the supervisory layer, with controlled data flow to the enterprise layer
   Reveal Solution Discussion Select an answer first