ISP ISP Industrial Control Systems & Critical Infrastructure Security

Question 1

Which U.S. government agency is the primary authority for protecting critical infrastructure cybersecurity and coordinates sector-specific agencies?

Accepted Answer

Cybersecurity and Infrastructure Security Agency (CISA)

Answer

CISA leads national efforts to understand, manage, and reduce risk to cyber and physical infrastructure across the 16 critical infrastructure sectors.

Question 2

An Industrial Control System (ICS) SCADA network differs from a traditional IT network primarily because:

Accepted Answer

ICS/SCADA systems control physical processes with real-time requirements where downtime or errors can have safety consequences

Answer

ICS/SCADA systems manage physical processes—pipelines, power grids, manufacturing lines—where cyber failures can directly cause physical harm or safety incidents.

Question 3

The Purdue Model (Industrial Automation and Control Systems reference architecture) is PRIMARILY used to:

Accepted Answer

Define network segmentation zones and security boundaries between IT and OT systems

Answer

The Purdue Model provides a hierarchical framework for segmenting industrial networks into zones from the enterprise level down to field devices, enabling security boundary definition.

Question 4

Which of the following is a unique security challenge in Operational Technology (OT) environments compared to IT?

Accepted Answer

Many OT devices have 20-30 year lifecycles and cannot accept security patches without disrupting operations

Answer

Legacy OT devices were designed for longevity and reliability, not security, making patching difficult or impossible without operational impact.

Question 5

A 'DMZ' (Demilitarized Zone) between IT and OT networks is PRIMARILY designed to:

Accepted Answer

Provide a controlled buffer zone where data can be exchanged between IT and OT without direct connectivity

Answer

An OT DMZ allows necessary data flows between IT and OT while preventing direct connectivity that could enable lateral movement of attackers.

(ISP) Industrial Security Professional Certification Practice Test

(ISP) Industrial Security Professional Certification Practice Test

ISP ISP Industrial Control Systems & Critical Infrastructure Security