Which activity is the primary purpose of ICS asset discovery and inventory?

Configuring firewall rules to block all external access to the ICS network

Replacing legacy protocols with modern encrypted alternatives

Establishing a baseline of all connected ICS devices for detection and change management

Generating real-time alerts for every packet crossing the ICS network

GIAC Response and Industrial Defense

Domain 1Objective 2

Detection in an ICS Environment GRID Practice Questions (Page 8)

Part of the ICS Security Operations domain, which makes up ~54% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~27–43 in this domain), expect 7–11 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

10concepts

Questions 36–37

36foundation · easy
Which activity is the primary purpose of ICS asset discovery and inventory?
Select an answer first
37foundation · easy
An ICS network analyst is examining packet captures and notices a protocol that uses TCP port 20000 and includes a 16-bit CRC in its data link layer. Which protocol is most likely present in the capture?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GRID

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GRID” is a trademark of its owner, used for identification only.

Detection in an ICS Environment GRID Practice Questions (Page 8)

Questions 36–37

Which activity is the primary purpose of ICS asset discovery and inventory?

An ICS network analyst is examining packet captures and notices a protocol that uses TCP port 20000 and includes a 16-bit CRC in its data link layer. Which protocol is most likely present in the capture?

Keep studying — ICS Security Operations