ISP ISP Industrial Control Systems & Critical Infrastructure Security

Question 1

Which U.S. government agency is the primary authority for protecting critical infrastructure cybersecurity and coordinates sector-specific agencies?

Accepted Answer

Cybersecurity and Infrastructure Security Agency (CISA)

Answer

Federal Bureau of Investigation (FBI)

Answer

National Security Agency (NSA)

Answer

Department of Justice (DOJ)

Question 2

An Industrial Control System (ICS) SCADA network differs from a traditional IT network primarily because:

Accepted Answer

ICS/SCADA systems control physical processes with real-time requirements where downtime or errors can have safety consequences

Answer

SCADA networks require faster internet connectivity

Answer

SCADA systems are always connected to the public internet for remote monitoring

Answer

ICS networks exclusively use wireless communication protocols

Question 3

The Purdue Model (Industrial Automation and Control Systems reference architecture) is PRIMARILY used to:

Accepted Answer

Define network segmentation zones and security boundaries between IT and OT systems

Answer

Design marketing campaigns for industrial products

Answer

Calculate production output targets for manufacturing plants

Answer

Assess employee ergonomics in industrial settings

Question 4

Which of the following is a unique security challenge in Operational Technology (OT) environments compared to IT?

Accepted Answer

Many OT devices have 20-30 year lifecycles and cannot accept security patches without disrupting operations

Answer

OT systems are updated more frequently than IT systems

Answer

OT systems have stronger built-in authentication than IT systems

Answer

OT environments have smaller attack surfaces than enterprise IT networks

Question 5

A 'DMZ' (Demilitarized Zone) between IT and OT networks is PRIMARILY designed to:

Accepted Answer

Provide a controlled buffer zone where data can be exchanged between IT and OT without direct connectivity

Answer

Increase data transfer speeds between enterprise and control networks

Answer

Allow unrestricted internet access to control systems for remote monitoring

Answer

Replace the need for firewalls in industrial environments

Question 6

Stuxnet is historically significant in ICS security because it demonstrated that:

Accepted Answer

Air-gapped industrial control systems can be compromised through physical media, causing real-world physical damage

Answer

Nuclear power plants are immune to cyberattack due to physical isolation

Answer

Cyber operations against industrial systems require nation-state resources and are therefore rare

Answer

SCADA vulnerabilities are only exploitable from within the facility network