Which of the following is a valuable data source for enhancing asset awareness in an ICS environment?

Weather forecasts for the plant location

Social media posts from plant operators

Configuration management database (CMDB) containing device details and relationships

A nuclear facility has a strict policy that prohibits any active scanning on the OT network. The security team needs to maintain asset awareness. Which approach is most effective?

Rely on manual inspections during scheduled outages

Use Shodan to monitor the facility's external IP

Deploy passive network taps at all critical junctions

Use Nmap with a very slow timing template

In an industrial control system (ICS) environment, which of the following is a primary reason for maintaining a complete and accurate asset inventory?

To enable effective incident response, vulnerability management, and change management by knowing what exists on the network

To automatically patch all devices without requiring manual intervention from operators

To provide a list of assets that can be shared publicly to demonstrate compliance with industry standards

To satisfy vendor licensing requirements for all software installed on engineering workstations

A refinery is consolidating its asset inventory from multiple sources. The team has a CMDB, network diagrams, and passive traffic captures. They need to identify which assets are most critical for safety. Which data source is most useful for this purpose?

Passive traffic captures that show communication patterns

CMDB that includes asset ownership and criticality tags

Vendor documentation that lists safety features

Network diagrams that show the physical layout

A power plant has a legacy serial-based RTU network that is not IP-based. The security team wants to gain visibility into these devices but cannot replace them. Which approach is most effective?

Rely on vendor documentation to infer the devices

Use an IP-to-serial converter and scan the IP side

Install a serial tap that mirrors traffic to a protocol analyzer

Use Nmap with a serial protocol plugin

GIAC Response and Industrial Defense

Domain 1Objective 4

Visibility and Asset Awareness in an ICS Environment GRID Practice Questions (Page 8)

Part of the ICS Security Operations domain, which makes up ~54% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~27–43 in this domain), expect 7–11 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

7concepts

Questions 36–40

36foundation · easy
Which of the following is a valuable data source for enhancing asset awareness in an ICS environment?
Select an answer first
37expert · hard
A nuclear facility has a strict policy that prohibits any active scanning on the OT network. The security team needs to maintain asset awareness. Which approach is most effective?
Select an answer first
38foundation · easy
In an industrial control system (ICS) environment, which of the following is a primary reason for maintaining a complete and accurate asset inventory?
Select an answer first
39expert · hard
A refinery is consolidating its asset inventory from multiple sources. The team has a CMDB, network diagrams, and passive traffic captures. They need to identify which assets are most critical for safety. Which data source is most useful for this purpose?
Select an answer first
40expert · hard
A power plant has a legacy serial-based RTU network that is not IP-based. The security team wants to gain visibility into these devices but cannot replace them. Which approach is most effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GRID

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GRID” is a trademark of its owner, used for identification only.