Which of the following systems is typically found at PERA Level 3 and is responsible for coordinating production activities across the plant?

Manufacturing Operations Management (MOM) system

Safety Instrumented System (SIS) logic solver

Programmable Logic Controller (PLC)

An attacker gains write access to a Level 2 HMI and changes the alarm setpoints for a chemical reactor. What is the most likely operational impact?

The PLC will automatically shut down the reactor

Operators may not be alerted to dangerous conditions, potentially leading to a safety incident

The historian will stop recording data

Production data will be lost permanently

A plant has a legacy Level 2 HMI that cannot be patched. It is connected to the control network and also has a USB port used for configuration. A risk assessment identifies that a USB drop attack could install malware that spreads to the PLCs. The plant cannot replace the HMI immediately. Which mitigation provides the most immediate risk reduction?

Move the HMI to a different network segment with no access to the PLCs

Replace the HMI's hard drive with a read-only drive

Disable the USB port physically and via Group Policy

Install a host-based intrusion detection system on the HMI

An attacker has compromised a Level 2 HMI and is able to send commands to a PLC that controls a high-speed conveyor. The safety system is independent and functional. What is the most likely impact?

The conveyor may operate in an unsafe manner, but the safety system can still shut it down if a dangerous condition is detected

The conveyor will stop immediately

There will be no impact because the safety system is functional

The safety system will be disabled by the attacker

A Level 3 historian needs to collect data from multiple Level 2 SCADA systems that use different protocols. What is the most appropriate way to integrate the data?

Have the historian directly connect to each PLC using proprietary protocols

Use an OPC gateway to translate between the different protocols and provide a unified interface

Use a manual data entry process

Install a separate historian for each SCADA system

GIAC Global Industrial Cyber Security Professional

Domain 1Objective 4

PERA Level 2 & 3 Technology Overview and Compromise GICSP Practice Questions (Page 5)

Part of the ICS Fundamentals and Architecture domain, which makes up ~40% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~28–48 in this domain), expect 7–12 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

7concepts

Questions 21–25

21foundation · easy
Which of the following systems is typically found at PERA Level 3 and is responsible for coordinating production activities across the plant?
Select an answer first
22application · medium
An attacker gains write access to a Level 2 HMI and changes the alarm setpoints for a chemical reactor. What is the most likely operational impact?
Select an answer first
23expert · hard
A plant has a legacy Level 2 HMI that cannot be patched. It is connected to the control network and also has a USB port used for configuration. A risk assessment identifies that a USB drop attack could install malware that spreads to the PLCs. The plant cannot replace the HMI immediately. Which mitigation provides the most immediate risk reduction?
Select an answer first
24expert · hard
An attacker has compromised a Level 2 HMI and is able to send commands to a PLC that controls a high-speed conveyor. The safety system is independent and functional. What is the most likely impact?
Select an answer first
25application · medium
A Level 3 historian needs to collect data from multiple Level 2 SCADA systems that use different protocols. What is the most appropriate way to integrate the data?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GICSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GICSP” is a trademark of its owner, used for identification only.