Physical Security Operations Flashcards
7 cards from real ICS practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Physical Security Operations flashcards as text
An oil refinery uses RFID access cards for its DCS building. An attacker clones an employee's card. Which additional control would MOST effectively defeat this attack?
Answer: Implement two-factor authentication (card + PIN or biometric)
Two-factor authentication ensures that even a cloned card cannot grant access without the second factor the attacker does not possess.
Which document provides US federal guidance on physical protection systems for nuclear power plants, a subset of ICS environments?
Answer: 10 CFR Part 73
10 CFR Part 73 is the NRC regulation that mandates physical protection requirements for nuclear power plants in the United States.
A water treatment facility's SCADA server room shares a wall with a publicly accessible restroom. What physical security risk does this represent?
Answer: Potential for wall-penetration attacks or eavesdropping
Shared walls with public areas create opportunities for physical penetration, drilling, or installing listening devices without authorized access.
What is the NERC CIP-006 standard primarily concerned with?
Answer: Physical security of BES Cyber Systems at electric utilities
NERC CIP-006 establishes requirements for physical security plans, access controls, and monitoring for Bulk Electric System Cyber Systems.
An industrial facility installs seismic sensors around its perimeter fence. What type of intrusion detection does this represent?
Answer: Passive detection using ground vibration analysis
Seismic sensors passively detect ground vibrations caused by footsteps or vehicles without emitting any signal themselves.
Which access control model is MOST appropriate for a multi-tenant ICS facility where different operators must be restricted to their own control areas?
Answer: Role-Based Access Control (RBAC)
RBAC assigns access rights based on job role, making it straightforward to restrict each operator group to only the areas relevant to their function.
A security team discovers that a contractor left a ladder against the outer fence of a power substation after completing maintenance. What physical security concern does this represent?
Answer: Facilitated climbing attack over the perimeter barrier
An unsecured ladder provides an easy means for an unauthorized person to scale the perimeter fence and gain access to the substation.