TSI Cybersecurity in Transportation Networks 3

Question 1

Which type of attack involves overwhelming a transportation agency's network with traffic to make online services unavailable?

Accepted Answer

Distributed Denial-of-Service (DDoS)

Answer

Spear phishing

Answer

SQL injection

Answer

Credential stuffing

Question 2

What is 'air gapping' in the context of transportation critical infrastructure protection?

Accepted Answer

Physically isolating a computer or network from unsecured external networks, including the internet

Answer

Using wireless communication between control centers

Answer

Installing air filtration systems in server rooms

Answer

Backing up data to cloud storage

Question 3

A transportation security officer notices an unfamiliar USB drive left near a workstation. The correct action is to:

Accepted Answer

Report it to IT security and do not plug it in

Answer

Plug it in to identify its owner

Answer

Discard it in the trash

Answer

Pass it to a colleague to investigate

Question 4

Which cybersecurity concept refers to continuously verifying every user and device attempting to access transportation network resources, regardless of location?

Accepted Answer

Zero Trust Architecture

Answer

Defense-in-depth

Answer

Perimeter defense

Answer

Role-based access control (RBAC)

Question 5

Patch management in transportation cybersecurity primarily involves:

Accepted Answer

Regularly applying software updates and security fixes to close known vulnerabilities

Answer

Physically repairing damaged network cables

Answer

Creating data backups on a scheduled basis

Answer

Training staff on phishing awareness

Question 6

What is a penetration test (pen test) in the context of transportation network security?

Accepted Answer

An authorized simulated cyberattack conducted to identify vulnerabilities before real attackers do

Answer

A physical inspection of transportation facility perimeters

Answer

A background check process for new cybersecurity employees

Answer

A test of emergency communication systems

Question 7

Why is securing the GPS infrastructure used by transportation systems a critical cybersecurity concern?

Accepted Answer

Because GPS spoofing or jamming can misdirect vehicles, disrupt logistics, and create safety hazards

Answer

Because GPS signals are encrypted and cannot be spoofed

Answer

Because GPS receivers are expensive and difficult to replace

Answer

Because GPS data is classified and not accessible to civilian agencies