CSI Security & Compliance 2 — Questions and Answers
Question 1: Which protocol is used to securely transport SNMP data in modern network management systems?
- SNMPv1
- SNMPv2c
- SNMPv3 (Correct answer)
- SNMP over HTTP
Correct answer: SNMPv3
SNMPv3 provides authentication and encryption, making it the secure choice for network management traffic.
Question 2: A system integrator is deploying an ICS environment. Which security framework is specifically designed for industrial control systems?
- NIST CSF
- IEC 62443 (Correct answer)
- ISO 27001
- PCI DSS
Correct answer: IEC 62443
IEC 62443 is the international standard series specifically addressing cybersecurity for industrial automation and control systems.
Question 3: In a zero-trust architecture, what happens when a device passes initial authentication but its posture check fails?
- Access is granted with logging
- Access is denied or quarantined (Correct answer)
- The user is prompted to re-authenticate
- The firewall is bypassed
Correct answer: Access is denied or quarantined
Zero-trust continuously validates device posture, and a failed posture check results in denied or restricted (quarantined) access regardless of identity authentication.
Question 4: What is the primary purpose of a Security Information and Event Management (SIEM) system in an integrated environment?
- Encrypt data at rest
- Centralize log collection and correlation for threat detection (Correct answer)
- Manage user identity provisioning
- Perform vulnerability scans
Correct answer: Centralize log collection and correlation for threat detection
A SIEM aggregates and correlates log data from multiple sources to detect security incidents and support compliance reporting.
Question 5: Which encryption standard is currently recommended by NIST for protecting sensitive government data?
- DES
- 3DES
- AES-256 (Correct answer)
- RC4
Correct answer: AES-256
NIST recommends AES-256 as the current standard for encrypting sensitive and classified information.
Question 6: A CSI must ensure data integrity in transit between subsystems. Which mechanism best achieves this?
- Data compression
- Digital signatures or HMAC (Correct answer)
- Base64 encoding
- Port mirroring
Correct answer: Digital signatures or HMAC
Digital signatures and HMAC (Hash-based Message Authentication Code) verify that data has not been tampered with during transmission.
Question 7: What does the concept of 'least privilege' mean in the context of system integration security?
- Users receive the minimum access rights needed to perform their job (Correct answer)
- All users share a common low-privilege account
- Systems are denied all network access by default
- Administrators must use guest accounts for daily tasks
Correct answer: Users receive the minimum access rights needed to perform their job
Least privilege limits user and system access to only the permissions required for their specific role, reducing the attack surface.
CSI Security & Compliance 2
Which protocol is used to securely transport SNMP data in modern network management systems?