GRID Incident Response in ICS Environments

Question 1

What is the first priority when responding to an ICS cyber incident?

Accepted Answer

Ensure personnel and system safety

Answer

Eradicate the malware

Answer

Isolate the infected network

Answer

Notify the press

Question 2

Why is forensics important in ICS incident response?

Accepted Answer

To identify attack vectors and preserve evidence

Answer

To calculate power consumption

Answer

To track maintenance schedules

Answer

To increase automation

Question 3

Which step should be performed immediately after identifying an ICS breach?

Accepted Answer

Contain the affected systems

Answer

Reboot all devices

Answer

Shut down the facility

Answer

Release a public statement

Question 4

What is a major challenge in ICS incident response?

Accepted Answer

Balancing security and operational continuity

Answer

Availability of antivirus software

Answer

Difficulty identifying PLC brands

Answer

Lack of network cabling

Question 5

How should communication be handled during an ICS incident?

Accepted Answer

Communicate out-of-band

Answer

Use internal chat systems

Answer

Broadcast over ICS network

Answer

Disable all communication

Question 6

Why is a post-incident review crucial in ICS environments?

Accepted Answer

To strengthen future response and defense

Answer

To assign blame

Answer

To notify vendors

Answer

To adjust employee wages