ISP ISP Information & Cybersecurity 3

Question 1

Which document formally authorizes a system to operate by accepting identified residual risks?

Accepted Answer

Authority to Operate (ATO)

Answer

System Security Plan (SSP)

Answer

Business Continuity Plan (BCP)

Answer

Incident Response Plan (IRP)

Question 2

Encryption of data in transit is BEST enforced in an industrial network by requiring:

Accepted Answer

Transport Layer Security (TLS) or equivalent cryptographic protocols on all network channels

Answer

All communications to use plaintext for troubleshooting visibility

Answer

Physical mail delivery for sensitive documents

Answer

Verbal communication only for classified operational data

Question 3

A 'security baseline' in an industrial information security program refers to:

Accepted Answer

The minimum acceptable configuration and security controls applied uniformly to all systems

Answer

The highest security standard applied only to classified networks

Answer

The starting point for a risk assessment before any controls are applied

Answer

A benchmark test for measuring network throughput

Question 4

Which approach to cybersecurity assumes that no user, device, or network segment should be trusted by default, even inside the perimeter?

Accepted Answer

Zero Trust Architecture

Answer

Defense-in-depth

Answer

Perimeter-based security

Answer

Security through obscurity

Question 5

Which regulatory framework governs the protection of Controlled Unclassified Information (CUI) in non-federal U.S. industrial organizations?

Accepted Answer

NIST SP 800-171 / CMMC

Answer

HIPAA

Answer

PCI DSS

Answer

SOX

Question 6

The principle of 'least privilege' in cybersecurity means:

Accepted Answer

Giving users only the minimum access rights needed to perform their job functions

Answer

Granting users the maximum access possible to avoid productivity delays

Answer

Allowing all administrators unrestricted access for efficiency

Answer

Applying security controls only to the most critical systems