GICSP Practice Test

GICSP Practice Test practice questions, page 2 of 3, with answer review and explanations.

Question 6

What kind of data could be found on a historian?

  1. Information needed for billing customers
  2. Information for supervising lower-level controllers in real-time
  3. Diagrams depicting an overview of the process
  4. Runtime libraries that software programs use

Question 7

Which of the following can an attacker gain by obtaining PLC logic project files for a SCADA system?

  1. Data regarding personnel and hiring practices
  2. Details about the network architecture
  3. Information about operational firewall rulesets
  4. Schedule of vendor product releases

Question 8

Which control helps prevent threats to Integrity?

  1. Firewall egress filtering
  2. Logging IDS alerts
  3. Centralized LDAP authentication
  4. Implementing digital signatures

Question 9

What mechanism could help defeat an attacker's attempt to hide evidence of his/her actions on the target system?

  1. Attack surface analysis
  2. Application allow lists
  3. Sandboxing
  4. Centralized logging

Question 10

An attacker has a goal of obtaining information stored in an ICS. Why might the attacker focus his efforts on the operating system rather than the ICS application?

  1. Organizations generally do not define a role or responsibility for dealing with operating systems, leaving them neglected and vulnerable
  2. The operating system will have fewer vulnerabilities than the ICS application
  3. The ICS is more likely to have vendor-provided security hardening guidance than the operating system will
  4. Control of the operating system offers access to applications running on it