ATP Physical & Cyber Security Integration 3

Question 1

A water treatment facility classifies its operational technology (OT) network as critical infrastructure. Which approach BEST represents converged physical-cyber resilience for this environment?

Accepted Answer

Air-gapped OT network with physically controlled jump servers and logged USB usage for data transfer

Answer

Air-gapping OT networks with tightly controlled, monitored physical access points reduces both cyber and insider-threat attack surfaces.

Question 2

Video surveillance footage is subpoenaed as evidence after a physical breach that also involved data exfiltration. Which chain-of-custody principle is MOST critical when handling this digital evidence?

Accepted Answer

Maintaining a documented, unbroken log of who accessed, copied, and transferred the footage from collection to courtroom

Answer

An unbroken chain of custody documents every person who handled the evidence, preserving its integrity and admissibility in legal proceedings.

Question 3

A company's security policy requires all visitors to be escorted and wear temporary badges. A visitor is discovered in a restricted server room unescorted with their badge obscured. Which term describes this type of insider threat scenario?

Accepted Answer

Unintentional or intentional policy violation enabling physical reconnaissance or data exfiltration

Answer

An unescorted visitor in a restricted area may represent a policy violation enabling physical reconnaissance or theft of data/hardware.

Question 4

Which encryption standard is recommended for protecting data on removable media that may leave a physically secure facility?

Accepted Answer

AES-256 in XTS mode

Answer

AES-256 in XTS mode (IEEE P1619) is the industry standard for full-disk and removable-media encryption due to its strength and sector-level diffusion.

Question 5

A Security Operations Center (SOC) analyst notices that a card reader alarm triggered at 2:47 AM correlates with an outbound data transfer spike on the SIEM at 2:49 AM. This is an example of:

Accepted Answer

Physical-cyber event correlation detecting a coordinated insider attack or breach

Answer

Temporal correlation between a physical access event and a network anomaly strongly suggests a coordinated attack combining physical and cyber vectors.

(ATP) Accredited Tier Professional Certification (Cooling & Refrigeration) Practice Test

(ATP) Accredited Tier Professional Certification (Cooling & Refrigeration) Practice Test

ATP Physical & Cyber Security Integration 3