ISP Information & Cybersecurity Flashcards

In an industrial security context, 'data at rest' refers to:

Answer: Stored data on drives, servers, or removable media not currently in transit

Data at rest encompasses all stored information that is not actively moving through a network or being processed.

Which framework is widely used in U.S. industrial environments to manage cybersecurity risk?

Answer: NIST Cybersecurity Framework (CSF)

The NIST CSF provides a structured approach to identifying, protecting, detecting, responding to, and recovering from cybersecurity incidents.

A phishing email that targets a specific senior executive is known as:

Answer: Whaling

Whaling is a form of spear phishing specifically aimed at high-value targets such as executives or key decision-makers.

Which access control model grants permissions based on a user's job function rather than individual identity?

Answer: Role-Based Access Control (RBAC)

RBAC assigns permissions to roles rather than individuals, simplifying administration and enforcing least privilege by job function.

What is the primary purpose of network segmentation in an industrial facility?

Answer: To limit the lateral movement of attackers and contain breaches to isolated network zones

Network segmentation divides infrastructure into zones so a compromise in one area cannot easily spread to critical operational systems.

Multi-factor authentication (MFA) requires users to verify identity using:

Answer: At least two different authentication factors from separate categories (something you know, have, or are)

MFA combines factors from different categories—knowledge, possession, and inherence—to ensure one compromised factor does not grant access.