ICS Surveillance & Monitoring Systems 5

Question 1

Which attack technique specifically targets ICS monitoring systems to make operators believe a process is running normally while malicious activity occurs?

Accepted Answer

False data injection (FDI) attack

Answer

False data injection attacks manipulate sensor readings or HMI displays to show normal values while the actual process is being tampered with.

Question 2

What is the purpose of 'change management' controls in the context of ICS surveillance and monitoring systems?

Accepted Answer

Ensuring all modifications to monitoring configurations are authorized, documented, and reversible

Answer

Change management ensures that modifications to monitoring systems are formally reviewed to prevent unauthorized changes that could create blind spots or vulnerabilities.

Question 3

An ICS facility uses wireless sensors for remote area monitoring. Which security control is MOST critical to implement for these devices?

Accepted Answer

Mutual authentication and encrypted communications between sensors and the gateway

Answer

Wireless ICS sensors must use mutual authentication to prevent rogue device insertion and encryption to prevent eavesdropping or data manipulation.

Question 4

Which concept describes the practice of deliberately feeding false data to an attacker's monitoring session to mislead their understanding of the ICS environment?

Accepted Answer

Deception technology / honeypot deployment

Answer

Deception technology, including honeypots and fake assets, feeds misleading information to adversaries who have breached the perimeter to slow their progress and reveal their presence.

Question 5

What ICS-specific challenge makes traditional IT vulnerability scanning tools potentially dangerous to use in OT environments?

Accepted Answer

Active scanning can crash legacy ICS devices that cannot handle unexpected network probes

Answer

Many legacy ICS devices have fragile network stacks that can crash, reboot, or lose communications when subjected to the probe traffic generated by active vulnerability scanners.

(ICS) Industrial Control Systems Security Certification Practice Test

(ICS) Industrial Control Systems Security Certification Practice Test

ICS Surveillance & Monitoring Systems 5