Online Access Free GICSP Practice Test

As part of a threat modeling exercise for an ICS facility, you need to evaluate potential attack vectors that could be used to compromise the system. Which of the following actions should be prioritized during the exercise?
(Select all that apply)
Response:

• A.Identify external threats such as malware targeting ICS protocols
• B.Focus only on internal threats while ignoring external actors
• C.Assess vulnerabilities in ICS-specific communication protocols
• D.Review previous incident reports and intelligence from similar industries

What is one of the key challenges of developing cybersecurity policies for ICS environments?
Response:

• A.Ensuring constant user access to sensitive data
• B.Outsourcing security functions to third-party providers
• C.Maintaining real-time control system availability while applying security measures
• D.Using open-source tools for all security functions

Which of the following is a commonly used framework for understanding cyber threats in an ICS environment?
Response:

• A.MITRE ATT&CK
• B.COBIT
• C.ISO 27001
• D.ITIL

Why is it important to regularly review and update ICS security policies?
Response:

• A.To adapt to evolving threats and changes in technology
• B.To prevent network access
• C.To reduce system performance
• D.To disable system monitoring

What is a major difference in the security goals between ICS and IT systems?
Response:

• A.ICS systems are less concerned about physical security
• B.ICS systems prioritize availability over confidentiality and integrity
• C.IT systems and ICS systems have identical security goals
• D.IT systems prioritize availability over confidentiality