Online Access Free GICSP Exam Questions

Which of the following is a best practice when creating enforceable ICS security policies?
Response:

• A.Disabling firewalls to improve data flow
• B.Granting network access without restrictions
• C.Allowing all users to modify security settings
• D.Implementing clear guidelines for patch management and software updates

What is a common vulnerability of PLCs at Level 1 in ICS environments?
Response:

• A.Weak password policies
• B.Lack of robust encryption mechanisms
• C.Lack of real-time processing capabilities
• D.Limited internet connectivity

Which of the following is a common method used to harden Unix-based endpoints in ICS environments?
Response:

• A.Disabling unnecessary services
• B.Increasing file system size
• C.Installing additional software packages
• D.Allowing root access by default

Which of the following devices is typically found at Level 1 of the PERA model?
Response:

• A.Sensors
• B.Firewalls
• C.Actuators
• D.Programmable Logic Controllers (PLCs)

Which of the following is a common vulnerability in SCADA systems at Level 3?
Response:

• A.Lack of encryption for inter-device communication
• B.Limited real-time data processing
• C.Poor physical access control
• D.Use of proprietary software