ICS SCADA & Industrial Protocol Security 2

Question 1

What is a Remote Terminal Unit (RTU) in a SCADA architecture?

Accepted Answer

A field device that interfaces with sensors and actuators and communicates data to the SCADA master station

Answer

A remote access server that provides VPN connectivity to the control center

Answer

A type of industrial firewall deployed at remote substations

Answer

A portable terminal used by technicians for on-site PLC programming

Question 2

In OT security, which property is typically prioritized above the traditional IT security triad?

Accepted Answer

Availability

Answer

Confidentiality

Answer

Integrity

Answer

Non-repudiation

Question 3

What is 'air gapping' as a security measure in ICS environments?

Accepted Answer

Physically isolating a network so it has no direct connection to external or corporate networks

Answer

Installing additional firewalls between network zones

Answer

Encrypting all communications between PLCs and SCADA servers

Answer

Using wireless protocols with frequency hopping to prevent eavesdropping

Question 4

The Purdue Model (also known as PERA) is used in ICS security to:

Accepted Answer

Establish a hierarchical reference model for organizing ICS network segments into levels

Answer

Define encryption algorithms suitable for industrial protocols

Answer

Assess and score vulnerabilities found in SCADA systems

Answer

Manage and schedule patching for ICS components

Question 5

Which cyberweapon specifically targeted Siemens S7-series PLCs and caused physical damage to uranium enrichment centrifuges?

Accepted Answer

Stuxnet

Answer

Flame

Answer

BlackEnergy

Answer

Industroyer/Crashoverride

Question 6

What is the primary cybersecurity risk introduced when connecting an OT/ICS network to a corporate IT network?

Accepted Answer

Expanded attack surface allowing threats and malware to propagate from the IT environment into the OT environment

Answer

Increased network latency that disrupts real-time control

Answer

Loss of the ability to remotely monitor industrial equipment

Answer

Higher licensing costs for industrial software

Question 7

Which ICS-specific malware targeted the Ukrainian power grid in 2015 and 2016, causing widespread blackouts?

Accepted Answer

BlackEnergy / Industroyer

Answer

Stuxnet

Answer

Triton/TRISIS

Answer

NotPetya