PERA Level 2 & 3 Technology Overview and Compromise GICSP Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   What is the primary purpose of a data historian at PERA Level 3?

   • ATo provide real-time control of field devices
   • BTo serve as the primary operator interface for the process
   • CTo manage the physical network infrastructure of the control network
   • DTo collect and store time-series process data for analysis and reporting
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A mining company's Level 3 MES server receives firmware updates from a vendor via a USB drive that is hand-carried to the site. The USB drive is infected with malware. What is the most likely compromise vector?

   • APhishing email targeting the MES server.
   • BDirect network attack from the internet.
   • CSupply chain attack through the vendor's update media.
   • DInsider threat from a disgruntled employee.
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A security assessment finds that a Level 2 HMI is directly reachable from the corporate IT network via an unsegmented switch. An attacker could exploit this to send malicious commands to the HMI. What is the most immediate mitigation?

   • AInstall antivirus software on the HMI
   • BUpgrade the HMI's operating system
   • CSegment the network so that Level 2 devices are isolated from the IT network with a firewall
   • DDisable the HMI's USB ports
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A security scan reveals that a Level 2 HMI has an open port that allows remote desktop connections from any device on the control network. What is the most immediate risk?

   • AAn attacker on the control network could take over the HMI and manipulate the process
   • BThe PLC will lose communication with the HMI
   • CThe historian will stop receiving data
   • DThe HMI will automatically reboot
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   Which of the following is a potential safety impact of compromising a PERA Level 3 system?

   • ALoss of historical data needed for incident analysis and safety investigations
   • BUnauthorized changes to the safety instrumented system (SIS) logic
   • CImmediate physical harm to operators from a malfunctioning sensor
   • DDirect manipulation of a field actuator's position
   Reveal Solution Discussion Select an answer first