TSI Cybersecurity in Transportation Networks 2

Question 1

Which of the following best describes a supply chain cyberattack targeting transportation systems?

Accepted Answer

Compromising third-party software or hardware before it reaches the transportation agency

Answer

Hacking a transportation agency's social media accounts

Answer

Flooding a website with excessive traffic

Answer

Stealing employee login credentials via email

Question 2

What is the principle of 'least privilege' as applied to transportation cybersecurity?

Accepted Answer

Providing users and systems only the access required to perform their specific job functions

Answer

Granting users the maximum permissions needed for any future task

Answer

Allowing all staff to access all systems during emergencies

Answer

Restricting access only to the IT department

Question 3

Under the TSA's cybersecurity directives for surface transportation, operators must report significant cybersecurity incidents within what timeframe?

Accepted Answer

24 hours

Answer

72 hours

Answer

7 days

Answer

30 days

Question 4

What does multi-factor authentication (MFA) add to cybersecurity in transportation control systems?

Accepted Answer

It requires users to verify identity through two or more independent factors before granting access

Answer

It replaces the need for passwords entirely

Answer

It encrypts all data transmitted across the network

Answer

It monitors network traffic for suspicious activity

Question 5

Which organization serves as the lead civilian cybersecurity agency that transportation operators should coordinate with during a cyber incident?

Accepted Answer

Cybersecurity and Infrastructure Security Agency (CISA)

Answer

Federal Bureau of Investigation (FBI)

Answer

National Security Agency (NSA)

Answer

Department of Transportation (DOT)

Question 6

Ransomware attacks on transportation systems are particularly dangerous primarily because:

Accepted Answer

They can encrypt operational systems and halt critical transportation services until a ransom is paid

Answer

They are difficult to detect with antivirus software

Answer

They only affect passenger data and not operations

Answer

They are typically carried out by nation-state actors exclusively

Question 7

What is the purpose of a cybersecurity incident response plan (IRP) for transportation agencies?

Accepted Answer

To establish pre-defined procedures for detecting, containing, eradicating, and recovering from cyber incidents

Answer

To prevent all cyberattacks from occurring

Answer

To train employees in software development

Answer

To audit financial records following a breach