ISP ISP Information & Cybersecurity

Question 1

In an industrial security context, 'data at rest' refers to:

Accepted Answer

Stored data on drives, servers, or removable media not currently in transit

Answer

Information actively being transmitted across a network

Answer

Data displayed on a monitor during active use

Answer

Information verbally communicated between employees

Question 2

Which framework is widely used in U.S. industrial environments to manage cybersecurity risk?

Accepted Answer

NIST Cybersecurity Framework (CSF)

Answer

ISO 45001

Answer

OSHA 29 CFR 1910

Answer

ASIS SPC.1

Question 3

A phishing email that targets a specific senior executive is known as:

Accepted Answer

Whaling

Answer

Vishing

Answer

Spear phishing

Answer

Smishing

Question 4

Which access control model grants permissions based on a user's job function rather than individual identity?

Accepted Answer

Role-Based Access Control (RBAC)

Answer

Discretionary Access Control (DAC)

Answer

Mandatory Access Control (MAC)

Answer

Attribute-Based Access Control (ABAC)

Question 5

What is the primary purpose of network segmentation in an industrial facility?

Accepted Answer

To limit the lateral movement of attackers and contain breaches to isolated network zones

Answer

To increase internet bandwidth for all users

Answer

To reduce the number of network switches required

Answer

To allow all devices to share a common IP address range

Question 6

Multi-factor authentication (MFA) requires users to verify identity using:

Accepted Answer

At least two different authentication factors from separate categories (something you know, have, or are)

Answer

Two different passwords

Answer

A password and a security question from the same category

Answer

Biometrics only, without any secondary factor