Global Industrial Cyber Security Professional (GICSP) (GICSP) Free Practice Test

Question 1

What is a common risk of not hardening ICS endpoints, especially in environments using older operating systems?
Response:

A. Loss of storage space

B. Vulnerability to cyberattacks

C. Decreased network performance

D. Increased system complexity

Correct Answer: B

Question 2

You are tasked with securing devices at Level 2 and Level 3 of an ICS network. Which of the following actions should you prioritize to protect these devices from external threats?
(Select all that apply)
Response:

A. Use encryption for data communication between Level 2 and 3 devices

B. Disable physical access to all SCADA systems

C. Apply security patches and firmware updates regularly

D. Implement network segmentation between Level 2 and Level 3

Correct Answer: A,C,D

Question 3

What is the primary function of Level 2 devices in the Purdue Enterprise Reference Architecture (PERA)?
Response:

A. Managing access to corporate applications

B. Conducting business operations and logistics

C. Real-time control of field devices

D. Managing supervisory control and monitoring

Correct Answer: D

Question 4

Why is it important to perform regular disaster recovery tests and drills in an ICS environment?
Response:

A. To ensure personnel are familiar with recovery procedures and identify potential gaps

B. To eliminate the need for system backups

C. To improve hardware performance

D. To avoid patching systems

Correct Answer: A

Question 5

You are tasked with gathering threat intelligence to inform a threat modeling exercise for a newly deployed ICS system. Which of the following data sources should be prioritized for collecting relevant intelligence?
(Select all that apply)
Response:

A. Threat intelligence feeds focused on critical infrastructure

B. General IT network activity logs

C. ICS-specific vulnerability databases

D. Industry reports on past ICS cyberattacks

Correct Answer: A,C,D

Question 6

Which wireless communication protocol is commonly used in ICS environments for low-power, low-data-rate communications between devices?
Response:

A. Bluetooth

B. Zigbee

C. LTE

D. Wi-Fi

Correct Answer: B

Question 7

Which device is responsible for executing control logic in a typical Level 1 ICS environment?
Response:

A. Sensor

B. Firewall

C. Programmable Logic Controller (PLC)

D. Human-Machine Interface (HMI)

Correct Answer: C

Question 8

Which protocol is commonly used to establish secure communication between remote devices in an ICS network?
Response:

A. Hypertext Transfer Protocol (HTTP)

B. Simple Network Management Protocol (SNMP)

C. File Transfer Protocol (FTP)

D. Secure Shell (SSH)

Correct Answer: D

Question 9

What type of communication occurs between Level 0 and Level 1 in the Purdue Reference Architecture?
Response:

A. Command and control communication

B. Business-to-business communication

C. External remote access

D. Peer-to-peer communication

Correct Answer: A

Question 10

As part of securing the ICS architecture, you need to isolate the control systems from external threats while maintaining data exchange between the business network and ICS network. Which of the following actions should you take?
(Select all that apply)
Response:

A. Apply strict firewall rules between the networks

B. Create a DMZ to isolate the control network

C. Implement VLANs to separate network traffic

D. Allow unrestricted access between the business and ICS networks

Correct Answer: A,B,C

Welcome to TestSimulate

GIAC Global Industrial Cyber Security Professional (GICSP) (GICSP) Free Practice Test