ISP ISP Information & Cybersecurity 2

Question 1

Which industrial control system (ICS) protocol is most commonly targeted by adversaries due to its lack of built-in authentication?

Accepted Answer

Modbus

Answer

HTTPS

Answer

SSH

Answer

TLS 1.3

Question 2

In an industrial security information classification scheme, which label typically applies to trade secrets and proprietary formulas?

Accepted Answer

Confidential / Proprietary

Answer

Public

Answer

Internal Use Only

Answer

Top Secret

Question 3

A security patch management program is PRIMARILY intended to:

Accepted Answer

Remediate known software vulnerabilities before they can be exploited

Answer

Improve application performance and add new features

Answer

Track employee software license compliance

Answer

Automate system backups on a scheduled basis

Question 4

Which security control prevents an employee from reading emails on a personally owned device not approved by the organization?

Accepted Answer

Mobile Device Management (MDM) with a BYOD policy restriction

Answer

Data Loss Prevention (DLP)

Answer

Antivirus software on company servers

Answer

Physical security guards at the building entrance

Question 5

An air-gapped network in an industrial environment means:

Accepted Answer

The network is physically isolated with no connections to external or untrusted networks

Answer

The network uses wireless frequencies exclusively

Answer

The network operates at lower bandwidth to reduce attack surface

Answer

The network uses encrypted tunnels to connect to the internet

Question 6

What is a 'zero-day vulnerability'?

Accepted Answer

A software flaw unknown to the vendor for which no patch exists at the time of discovery or exploitation

Answer

A vulnerability with no exploits available in any threat database

Answer

A vulnerability discovered exactly at midnight

Answer

A flaw in a zero-trust network architecture