TSI Cybersecurity in Transportation Networks 2

Question 1

Which of the following best describes a supply chain cyberattack targeting transportation systems?

Accepted Answer

Compromising third-party software or hardware before it reaches the transportation agency

Answer

A supply chain attack involves inserting malicious code or hardware into products used by the target organization before delivery, bypassing direct security controls.

Question 2

What is the principle of 'least privilege' as applied to transportation cybersecurity?

Accepted Answer

Providing users and systems only the access required to perform their specific job functions

Answer

Least privilege limits user and system access to only what is necessary for their role, reducing the attack surface and limiting damage if credentials are compromised.

Question 3

Under the TSA's cybersecurity directives for surface transportation, operators must report significant cybersecurity incidents within what timeframe?

Accepted Answer

24 hours

Answer

TSA's cybersecurity directives for surface transportation operators require reporting of significant cybersecurity incidents to CISA within 24 hours of identification.

Question 4

What does multi-factor authentication (MFA) add to cybersecurity in transportation control systems?

Accepted Answer

It requires users to verify identity through two or more independent factors before granting access

Answer

MFA requires a combination of something the user knows, has, or is, significantly reducing the risk of unauthorized access even if a password is stolen.

Question 5

Which organization serves as the lead civilian cybersecurity agency that transportation operators should coordinate with during a cyber incident?

Accepted Answer

Cybersecurity and Infrastructure Security Agency (CISA)

Answer

CISA is the lead U.S. civilian cybersecurity agency responsible for coordinating incident response and providing resources to critical infrastructure sectors including transportation.

TSI - Transportation Security Institute Certification Practice Test

TSI - Transportation Security Institute Certification Practice Test

TSI Cybersecurity in Transportation Networks 2