最新的Cyber Security認證 GICSP考試題庫

問題1

In an ICS environment, what is the Recovery Time Objective (RTO) used to define?
Response:

A. The average time between system maintenance

B. The time needed to detect an incident

C. The maximum acceptable amount of time to restore a system after an incident

D. The amount of data loss that is acceptable after an incident

正確答案: C

問題2

You have been tasked with securing an ICS endpoint running Windows. Which of the following hardening steps should you perform?
(Select all that apply)
Response:

A. Enable automatic updates and apply the latest patches

B. Disable default administrative accounts

C. Install and configure host-based intrusion detection systems (HIDS)

D. Allow open access to shared drives

正確答案: A,B,C

問題3

Which type of attack could compromise Level 3 systems and affect business planning and logistics?
Response:

A. SQL injection

B. Advanced Persistent Threat (APT) attacks

C. Sensor spoofing

D. Distributed Denial-of-Service (DDoS) attacks

正確答案: B

問題4

During the design of an ICS network, you are tasked with implementing network segmentation between the corporate IT network and the control network. Which of the following configurations would you recommend to achieve this?
(Select all that apply)
Response:

A. Allow all traffic from the IT network to the control network

B. Implement a firewall between the corporate and control networks

C. Disable encryption for faster data flow

D. Create a DMZ between the control and IT networks

正確答案: B,D

問題5

You are updating the incident response plan for a manufacturing facility with critical ICS operations. Which of the following components should you include to ensure a comprehensive and effective plan?
(Select all that apply)
Response:

A. Assigning roles and responsibilities for the incident response team

B. Clear steps for containment, eradication, and recovery

C. Enabling automatic updates for all field devices without review

D. Post-incident procedures for assessing the impact and lessons learned

正確答案: A,B,D

問題6

Which of the following is a best practice when creating enforceable ICS security policies?
Response:

A. Allowing all users to modify security settings

B. Implementing clear guidelines for patch management and software updates

C. Granting network access without restrictions

D. Disabling firewalls to improve data flow

正確答案: B

問題7

Which security concern is commonly associated with Level 0 and Level 1 devices in ICS environments?
Response:

A. Limited encryption capabilities

B. Over-reliance on cloud computing

C. Inability to transmit data in real time

D. Lack of compliance with GDPR

正確答案: A

問題8

What is the role of intelligence gathering in ICS security?
Response:

A. To improve system performance

B. To collect data on threats and vulnerabilities affecting ICS networks

C. To reduce the need for physical security

D. To enable faster incident response times

正確答案: B

問題9

What is the primary benefit of using network segmentation in ICS architecture?
Response:

A. Simplifying software upgrades

B. Isolating and protecting critical systems from attacks

C. Increasing the data throughput

D. Reducing hardware costs

正確答案: B

問題10

Which ICS-specific protocol was designed to allow efficient communication between field devices and control systems while minimizing bandwidth usage?
Response:

A. Distributed Network Protocol (DNP3)

B. Hypertext Transfer Protocol Secure (HTTPS)

C. BACnet

D. Modbus

正確答案: A

最新的GIAC Global Industrial Cyber Security Professional (GICSP) - GICSP免費考試真題

最新更新

站內鏈接

聯系我們