ISP ISP Industrial Control Systems & Critical Infrastructure Security 2

Question 1

Presidential Policy Directive 21 (PPD-21) identifies how many critical infrastructure sectors in the United States?

Accepted Answer

16

Answer

PPD-21 designates 16 critical infrastructure sectors, each with a designated Sector Risk Management Agency (SRMA) responsible for sector-specific guidance.

Question 2

Which NIST publication provides a cybersecurity framework specifically tailored for ICS and SCADA systems?

Accepted Answer

NIST SP 800-82 (Guide to ICS Security)

Answer

NIST SP 800-82 provides specific guidance on applying security controls to industrial control systems, SCADA, and other OT environments.

Question 3

A 'unidirectional gateway' (data diode) in an OT network is BEST described as:

Accepted Answer

A hardware device that physically allows data to flow in only one direction, preventing any reverse communication

Answer

Data diodes enforce unidirectional data flow at the hardware level, making it physically impossible for data to travel back from the secure OT network to the IT network.

Question 4

Which threat actor type poses the GREATEST risk to critical national infrastructure due to their resources and long-term strategic objectives?

Accepted Answer

Nation-state Advanced Persistent Threat (APT) groups

Answer

Nation-state APT groups have significant resources, technical sophistication, and long-term strategic patience that makes them uniquely dangerous to critical infrastructure.

Question 5

The ISA/IEC 62443 standard series applies to:

Accepted Answer

Security for Industrial Automation and Control Systems (IACS) across the entire lifecycle

Answer

ISA/IEC 62443 is the international standard series addressing security requirements for industrial automation and control systems from design through operation.

(ISP) Industrial Security Professional Certification Practice Test

(ISP) Industrial Security Professional Certification Practice Test

ISP ISP Industrial Control Systems & Critical Infrastructure Security 2