ICS Surveillance & Monitoring Systems 3

Question 1

Which network architecture practice BEST protects ICS monitoring systems from cyber threats originating on the corporate IT network?

Accepted Answer

Implementing a demilitarized zone (DMZ) between IT and OT networks

Answer

A DMZ acts as a buffer zone, controlling data flows between the untrusted corporate network and the critical OT monitoring environment.

Question 2

In ICS monitoring, what is a 'data diode' used for?

Accepted Answer

Allowing data to flow in only one direction, from OT to IT, without any return path

Answer

A data diode is a hardware-enforced unidirectional gateway that ensures data can only travel from the ICS network outward, eliminating the return attack path.

Question 3

An operator notices that a flow meter reading in the SCADA HMI has been constant for 6 hours without variation. What security concern should this raise?

Accepted Answer

A sensor or its data feed may have been spoofed or frozen by an attacker

Answer

A perfectly flat reading over an extended period is a hallmark indicator of sensor spoofing or data substitution attacks targeting ICS monitoring.

Question 4

What is the purpose of 'out-of-band' monitoring in ICS security surveillance?

Accepted Answer

Using a separate, dedicated network to monitor ICS devices without traversing the operational network

Answer

Out-of-band monitoring uses a dedicated management network so that surveillance traffic does not interfere with or traverse the production ICS network.

Question 5

Which type of ICS monitoring system is specifically designed to detect anomalies by establishing a behavioral baseline of normal OT network communications?

Accepted Answer

OT-specific Intrusion Detection System (IDS) with passive monitoring

Answer

OT-specific passive IDS tools learn normal communication patterns between ICS devices and alert on deviations without disrupting real-time control traffic.

(ICS) Industrial Control Systems Security Certification Practice Test

(ICS) Industrial Control Systems Security Certification Practice Test

ICS Surveillance & Monitoring Systems 3