PERA Level 2 & 3 Technology Overview and Compromise GICSP Practice Questions (Page 9)

Questions 41–45

1. 41application · medium

   A manufacturing company integrates its Level 3 manufacturing execution system (MES) with the corporate ERP system to share production orders. The integration team uses a direct database link from the ERP server to the MES database. What is the primary security concern with this design?

   • AThe direct link bypasses the IT/OT boundary, allowing threats from the IT network to reach Level 3 systems.
   • BThe MES will lose its ability to store historical data.
   • CThe ERP system will be unable to handle the volume of production data.
   • DThe MES database will become too slow to handle real-time process control.
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   A site's MES system is being upgraded. The vendor requires remote access to the MES server for installation. The security team wants to minimize risk. What is the best way to provide remote access?

   • AUse a secure jump host in a DMZ with multi-factor authentication and session recording
   • BAllow the vendor to use a VPN with a shared account
   • CSend the MES server to the vendor's site for the upgrade
   • DExpose the MES server directly to the internet with a strong password
   Reveal Solution Discussion Select an answer first
4. 43expert · hard

   A plant's Level 3 historian is not receiving data from the Level 2 SCADA system. The SCADA system is running, and the network is up. The historian's data collection service is configured to use OPC DA, but the SCADA system's OPC server is not responding. What is the most likely issue?

   • AThe PLCs are not sending data to the SCADA system
   • BThe historian's hard drive is full
   • CThe OPC server is not running or is blocked by a firewall between Level 2 and Level 3
   • DThe MES system is interfering with the historian
   Reveal Solution Discussion Select an answer first
5. 44expert · hard

   A plant's Level 3 MES is running on a server that also has internet access for software updates. A security assessment finds that the MES is vulnerable to a known exploit. The plant cannot afford downtime to patch immediately. What is the best interim mitigation?

   • ARestrict internet access from the MES server to only the vendor's update servers via a firewall
   • BDisconnect the MES from the network entirely
   • CChange the MES server's IP address
   • DInstall a second MES server and migrate
   Reveal Solution Discussion Select an answer first
6. 45expert · hard

   A power plant has a Level 2 HMI that communicates with a Level 3 historian using OPC UA. The plant is upgrading its network and the IT team proposes to use a standard IT switch with VLANs to separate traffic. The controls team is concerned about latency and reliability. What is the best way to address this concern?

   • AMove the historian to the Level 2 network to reduce latency.
   • BUse a dedicated industrial switch for the control network and a separate switch for the historian connection.
   • CUse the IT switch with QoS to prioritize OPC UA traffic.
   • DUse a wireless bridge for the historian connection.
   Reveal Solution Discussion Select an answer first