ICS Overview & Concepts GICSP Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   A power utility has a legacy SCADA system using Modbus over serial links. They want to add network-based monitoring for security, but the serial protocol lacks authentication and encryption. The team is considering three options: (1) deploy a serial-to-Ethernet converter with a firewall, (2) replace the protocol with DNP3 over TCP/IP, or (3) implement a bump-in-the-wire encryption device. The system must remain operational 24/7 with minimal downtime. What is the best approach?

   • AImplement a bump-in-the-wire encryption device on the serial links
   • BDeploy a serial-to-Ethernet converter with a firewall to segment the legacy system
   • CLeave the system as-is and rely on physical security
   • DReplace Modbus with DNP3 over TCP/IP to gain authentication and encryption
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A pharmaceutical plant is integrating its OT network with the corporate IT network to allow real-time production dashboards. The OT team is concerned about the impact of IT traffic on the control network. The IT team proposes using a router with access control lists (ACLs) to filter traffic. The OT team insists on a unidirectional gateway. What is the primary reason the OT team's approach is more appropriate?

   • AA router with ACLs is too slow for real-time data
   • BA unidirectional gateway ensures that no traffic can flow from the IT network into the OT network, eliminating a whole class of attacks
   • CUnidirectional gateways are cheaper than routers
   • DThe IT network is untrusted and cannot be secured
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   An IT administrator is asked to apply a standard IT security policy to an ICS network. The policy requires automatic password rotation every 30 days and automatic reboots after updates. The OT manager rejects the policy. Which ICS characteristic makes this policy unsuitable?

   • AThe ICS network is isolated and does not need security policies
   • BThe IT administrator lacks the authority to set policies
   • CContinuous process availability and real-time control are more important than routine maintenance
   • DICS devices do not support passwords
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   How do ICS operational priorities typically differ from traditional IT systems?

   • AICS prioritize data confidentiality over system availability
   • BICS prioritize data integrity over real-time response
   • CICS prioritize ease of patching over system reliability
   • DICS prioritize system availability and safety over data confidentiality
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A water utility is upgrading its SCADA system. The current system uses a proprietary protocol that is not well-documented. The utility wants to improve security and interoperability. The project manager proposes replacing all RTUs and the master station with modern equipment supporting DNP3. The operations manager is concerned about the cost and downtime. What is the most important factor to consider in this decision?

   • AThe cost of new hardware is the only factor that matters
   • BThe utility should migrate to a cloud-based SCADA system
   • CThe operational risk of a full system replacement versus the security benefits of a modern protocol
   • DThe proprietary protocol is secure enough and should be kept
   Reveal Solution Discussion Select an answer first