PERA Level 2 & 3 Technology Overview and Compromise GICSP Practice Questions (Page 8)

Questions 36–40

1. 36foundation · easy

   A manufacturing operations management (MOM) system at Level 3 is compromised because a software update from a vendor was tampered with before installation. This is an example of which type of attack vector?

   • ASupply chain attack
   • BDirect physical attack
   • CSocial engineering attack
   • DNetwork-based attack
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A site manager wants to analyze production trends over the past year to improve efficiency. The data is currently only stored in the PLCs' memory and in the HMI's local cache. What is the most appropriate solution?

   • AInstall a new Level 2 supervisory control system to replace the HMI
   • BUse the PLC's built-in data logging to store a year of data
   • CIncrease the HMI's local storage capacity and keep data there
   • DDeploy a Level 3 historian server to collect and archive process data from the control network
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   Which of the following is a common attack vector targeting PERA Level 2 systems?

   • ASQL injection against an enterprise ERP database
   • BDNS spoofing on the corporate email server
   • CExploitation of a vulnerability in an HMI application via a malicious file uploaded through a USB drive
   • DPhysical tampering with a temperature sensor in the field
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   What is a potential operational impact of compromising a PERA Level 2 HMI?

   • AThe physical safety of field devices is immediately compromised.
   • BThe enterprise billing system will generate incorrect invoices.
   • COperators may receive false process readings, leading to incorrect manual interventions.
   • DThe site's production schedule will be automatically adjusted.
   Reveal Solution Discussion Select an answer first
6. 40expert · hard

   A chemical plant has a Level 3 MES that is integrated with the corporate ERP via a DMZ. The integration uses a file transfer protocol to exchange production orders. The security team wants to reduce the risk of malware entering the OT network. Which approach provides the best balance of security and functionality?

   • ADisconnect the MES from the ERP entirely and use manual data entry.
   • BUse a VPN tunnel from the ERP directly to the MES, bypassing the DMZ.
   • CAllow the ERP to write directly to the MES database using a SQL link.
   • DReplace the file transfer with a message broker that validates and sanitizes data before forwarding to the MES.
   Reveal Solution Discussion Select an answer first