ICS Physical Security Operations 3

Question 1

An oil refinery uses RFID access cards for its DCS building. An attacker clones an employee's card. Which additional control would MOST effectively defeat this attack?

Accepted Answer

Implement two-factor authentication (card + PIN or biometric)

Answer

Two-factor authentication ensures that even a cloned card cannot grant access without the second factor the attacker does not possess.

Question 2

Which document provides US federal guidance on physical protection systems for nuclear power plants, a subset of ICS environments?

Accepted Answer

10 CFR Part 73

Answer

10 CFR Part 73 is the NRC regulation that mandates physical protection requirements for nuclear power plants in the United States.

Question 3

A water treatment facility's SCADA server room shares a wall with a publicly accessible restroom. What physical security risk does this represent?

Accepted Answer

Potential for wall-penetration attacks or eavesdropping

Answer

Shared walls with public areas create opportunities for physical penetration, drilling, or installing listening devices without authorized access.

Question 4

What is the NERC CIP-006 standard primarily concerned with?

Accepted Answer

Physical security of BES Cyber Systems at electric utilities

Answer

NERC CIP-006 establishes requirements for physical security plans, access controls, and monitoring for Bulk Electric System Cyber Systems.

Question 5

An industrial facility installs seismic sensors around its perimeter fence. What type of intrusion detection does this represent?

Accepted Answer

Passive detection using ground vibration analysis

Answer

Seismic sensors passively detect ground vibrations caused by footsteps or vehicles without emitting any signal themselves.

(ICS) Industrial Control Systems Security Certification Practice Test

(ICS) Industrial Control Systems Security Certification Practice Test

ICS Physical Security Operations 3