TSI Cybersecurity in Transportation Networks

Question 1

Which term describes a cyberattack where an attacker intercepts communications between two transportation control systems to alter or steal data?

Accepted Answer

Man-in-the-Middle (MitM) attack

Answer

Denial-of-Service (DoS) attack

Answer

SQL injection attack

Answer

Phishing attack

Question 2

What is the primary purpose of network segmentation in transportation security systems?

Accepted Answer

To limit the spread of a cyberattack by isolating critical systems

Answer

To increase data transfer speeds

Answer

To reduce hardware costs

Answer

To simplify user authentication

Question 3

Which federal framework is most commonly used by U.S. transportation agencies to manage cybersecurity risk?

Accepted Answer

NIST Cybersecurity Framework (CSF)

Answer

ISO 27001

Answer

PCI-DSS

Answer

SOC 2

Question 4

Operational Technology (OT) systems used in transportation differ from traditional IT systems primarily because OT systems:

Accepted Answer

Control physical processes where downtime can have life-safety consequences

Answer

Require internet connectivity to function

Answer

Are easier to patch and update

Answer

Use only commercial off-the-shelf software

Question 5

What does a SCADA system do in a transportation context?

Accepted Answer

Supervises and controls industrial equipment and infrastructure remotely

Answer

Manages passenger ticketing and reservations

Answer

Encrypts sensitive traveler data

Answer

Coordinates law enforcement response to incidents

Question 6

Which type of malware specifically targets industrial control systems (ICS) and could disrupt transportation operations?

Accepted Answer

ICS-specific malware such as Industroyer/Crashoverride

Answer

Adware

Answer

Spyware

Answer

Browser hijacker

Question 7

What is the recommended practice for managing default credentials on transportation network devices?

Accepted Answer

Change all default usernames and passwords immediately upon deployment

Answer

Leave default credentials to ensure compatibility

Answer

Share default credentials with all staff for convenience

Answer

Disable authentication on internal network devices