Security Network Architecture and Protocols Flashcards
7 cards from real ICS practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Security Network Architecture and Protocols flashcards as text
Which wireless protocol is commonly used in industrial environments for low-power sensor networks but has known security vulnerabilities?
Answer: Zigbee (802.15.4)
Zigbee (IEEE 802.15.4) is widely used for industrial sensor networks but has documented vulnerabilities including key extraction weaknesses.
What is the role of a Security Information and Event Management (SIEM) system in ICS network security?
Answer: Aggregating and correlating logs to detect anomalies across OT/IT networks
A SIEM collects logs from multiple sources and uses correlation rules to identify suspicious patterns or security incidents.
In ICS network design, why is Network Time Protocol (NTP) synchronization considered a security concern?
Answer: Attackers can manipulate time to forge timestamps and disrupt log correlation
Time manipulation attacks against NTP can corrupt event timestamps, making incident correlation and forensic analysis unreliable.
Which protocol provides secure, encrypted communication for SCADA systems using TLS as a transport-layer security wrapper?
Answer: OPC UA
OPC UA natively supports TLS encryption and certificate-based authentication for secure machine-to-machine communication.
What network monitoring technique passively captures ICS protocol traffic to build a baseline of normal device behavior?
Answer: Passive network traffic analysis
Passive network traffic analysis captures and inspects OT protocol traffic without generating any packets that could disrupt sensitive ICS devices.
Which firewall rule policy is considered best practice for ICS network perimeter protection?
Answer: Default-deny with explicit allow rules for required communications
A default-deny (whitelist) policy ensures only explicitly authorized communication flows are permitted, minimizing attack surface.
What is the main advantage of using out-of-band management networks for ICS devices?
Answer: Separate management access path unaffected by OT network compromise
An out-of-band management network provides a dedicated, isolated path for device administration that remains accessible even if the primary OT network is compromised.