GRID ICS Network Architecture & Defense Strategies

Question 1

What is the purpose of the Purdue Model in ICS architecture?

Accepted Answer

To organize network levels and security boundaries

Answer

To regulate IP address ranges

Answer

To consolidate control logic

Answer

To boost network throughput

Question 2

Which zone in ICS architecture typically houses SCADA servers?

Accepted Answer

Operations zone

Answer

Enterprise zone

Answer

Demilitarized zone

Answer

Field zone

Question 3

Why is network segmentation critical in ICS defense?

Accepted Answer

To isolate threats and improve control

Answer

To reduce cable requirements

Answer

To allow remote access

Answer

To enable multicast routing

Question 4

What is the role of an industrial DMZ (iDMZ)?

Accepted Answer

To control data flow between networks

Answer

To store backups

Answer

To accelerate firmware deployment

Answer

To replace firewall functions

Question 5

Which security control is best for managing external access to an ICS?

Accepted Answer

Firewall with ACLs

Answer

Unrestricted VPN

Answer

Dedicated Ethernet

Answer

Encrypted USB drives

Question 6

What is the primary advantage of one-way communication in ICS defense?

Accepted Answer

It blocks inbound cyber attacks

Answer

It increases bandwidth

Answer

It prevents data loss

Answer

It enables voice-over-IP