ISP ISP Information & Cybersecurity

Question 1

In an industrial security context, 'data at rest' refers to:

Accepted Answer

Stored data on drives, servers, or removable media not currently in transit

Answer

Data at rest encompasses all stored information that is not actively moving through a network or being processed.

Question 2

Which framework is widely used in U.S. industrial environments to manage cybersecurity risk?

Accepted Answer

NIST Cybersecurity Framework (CSF)

Answer

The NIST CSF provides a structured approach to identifying, protecting, detecting, responding to, and recovering from cybersecurity incidents.

Question 3

A phishing email that targets a specific senior executive is known as:

Accepted Answer

Whaling

Answer

Whaling is a form of spear phishing specifically aimed at high-value targets such as executives or key decision-makers.

Question 4

Which access control model grants permissions based on a user's job function rather than individual identity?

Accepted Answer

Role-Based Access Control (RBAC)

Answer

RBAC assigns permissions to roles rather than individuals, simplifying administration and enforcing least privilege by job function.

Question 5

What is the primary purpose of network segmentation in an industrial facility?

Accepted Answer

To limit the lateral movement of attackers and contain breaches to isolated network zones

Answer

Network segmentation divides infrastructure into zones so a compromise in one area cannot easily spread to critical operational systems.

(ISP) Industrial Security Professional Certification Practice Test