TSI Cybersecurity in Transportation Networks 3

Question 1

Which type of attack involves overwhelming a transportation agency's network with traffic to make online services unavailable?

Accepted Answer

Distributed Denial-of-Service (DDoS)

Answer

A DDoS attack floods a network or server with traffic from multiple sources, rendering services unavailable and potentially disrupting transportation operations that rely on internet connectivity.

Question 2

What is 'air gapping' in the context of transportation critical infrastructure protection?

Accepted Answer

Physically isolating a computer or network from unsecured external networks, including the internet

Answer

Air gapping physically isolates critical transportation control systems from external networks, preventing remote cyberattacks by ensuring no electronic connection exists to less-trusted networks.

Question 3

A transportation security officer notices an unfamiliar USB drive left near a workstation. The correct action is to:

Accepted Answer

Report it to IT security and do not plug it in

Answer

Unknown USB drives may contain malware designed to auto-execute when plugged in (a 'baiting' attack); they must be reported to IT security and never inserted into any device.

Question 4

Which cybersecurity concept refers to continuously verifying every user and device attempting to access transportation network resources, regardless of location?

Accepted Answer

Zero Trust Architecture

Answer

Zero Trust Architecture operates on the principle of 'never trust, always verify,' requiring continuous authentication and authorization for all users and devices, even those inside the network perimeter.

Question 5

Patch management in transportation cybersecurity primarily involves:

Accepted Answer

Regularly applying software updates and security fixes to close known vulnerabilities

Answer

Patch management ensures that operating systems, applications, and firmware receive timely security updates to close vulnerabilities that attackers could exploit in transportation control systems.

TSI - Transportation Security Institute Certification Practice Test

TSI - Transportation Security Institute Certification Practice Test

TSI Cybersecurity in Transportation Networks 3