GRID Industrial Control System Threat Detection & Monitoring

Question 1

What is the primary purpose of a network intrusion detection system (NIDS) in an ICS environment?

Accepted Answer

Detect malicious activity in network traffic

Answer

Optimize data throughput

Answer

Reduce energy consumption

Answer

Automate firmware updates

Question 2

Why is deep packet inspection valuable in ICS threat monitoring?

Accepted Answer

It identifies protocol-level threats

Answer

It increases network latency

Answer

It filters email attachments

Answer

It boosts encryption levels

Question 3

What is a key challenge of monitoring ICS networks compared to IT networks?

Accepted Answer

Use of legacy and proprietary protocols

Answer

Fewer users on the network

Answer

Lack of physical access

Answer

Higher bandwidth availability

Question 4

Which protocol is commonly analyzed for anomalies in ICS environments?

Accepted Answer

Modbus

Answer

HTTP

Answer

SMTP

Answer

IMAP

Question 5

Why is passive monitoring preferred in ICS threat detection?

Accepted Answer

It minimizes interference with critical systems

Answer

It reduces security

Answer

It replaces antivirus tools

Answer

It encrypts industrial protocols

Question 6

What is the role of a security information and event management (SIEM) system in ICS?

Accepted Answer

To centralize log data and detect threats

Answer

To schedule maintenance updates

Answer

To monitor employee attendance

Answer

To balance network load