ISP ISP Information & Cybersecurity 2

Question 1

Which industrial control system (ICS) protocol is most commonly targeted by adversaries due to its lack of built-in authentication?

Accepted Answer

Modbus

Answer

Modbus was designed for reliability in isolated networks and lacks authentication, making it vulnerable when exposed to broader networks.

Question 2

In an industrial security information classification scheme, which label typically applies to trade secrets and proprietary formulas?

Accepted Answer

Confidential / Proprietary

Answer

Confidential or Proprietary is the standard commercial classification for sensitive business information like trade secrets that require restricted handling.

Question 3

A security patch management program is PRIMARILY intended to:

Accepted Answer

Remediate known software vulnerabilities before they can be exploited

Answer

Patch management ensures vulnerabilities identified in software are addressed in a timely manner to reduce the attack surface.

Question 4

Which security control prevents an employee from reading emails on a personally owned device not approved by the organization?

Accepted Answer

Mobile Device Management (MDM) with a BYOD policy restriction

Answer

MDM combined with a BYOD policy can enforce that only managed, compliant devices can access corporate email and resources.

Question 5

An air-gapped network in an industrial environment means:

Accepted Answer

The network is physically isolated with no connections to external or untrusted networks

Answer

An air gap is a physical security measure that prevents a network from connecting to external systems, limiting remote attack vectors.

(ISP) Industrial Security Professional Certification Practice Test

(ISP) Industrial Security Professional Certification Practice Test

ISP ISP Information & Cybersecurity 2