ISP Information & Cybersecurity Flashcards

Which industrial control system (ICS) protocol is most commonly targeted by adversaries due to its lack of built-in authentication?

Answer: Modbus

Modbus was designed for reliability in isolated networks and lacks authentication, making it vulnerable when exposed to broader networks.

In an industrial security information classification scheme, which label typically applies to trade secrets and proprietary formulas?

Answer: Confidential / Proprietary

Confidential or Proprietary is the standard commercial classification for sensitive business information like trade secrets that require restricted handling.

A security patch management program is PRIMARILY intended to:

Answer: Remediate known software vulnerabilities before they can be exploited

Patch management ensures vulnerabilities identified in software are addressed in a timely manner to reduce the attack surface.

Which security control prevents an employee from reading emails on a personally owned device not approved by the organization?

Answer: Mobile Device Management (MDM) with a BYOD policy restriction

MDM combined with a BYOD policy can enforce that only managed, compliant devices can access corporate email and resources.

An air-gapped network in an industrial environment means:

Answer: The network is physically isolated with no connections to external or untrusted networks

An air gap is a physical security measure that prevents a network from connecting to external systems, limiting remote attack vectors.

What is a 'zero-day vulnerability'?

Answer: A software flaw unknown to the vendor for which no patch exists at the time of discovery or exploitation

Zero-day vulnerabilities are particularly dangerous because defenders have 'zero days' to patch before the flaw can be exploited.