GIAC GICSP Prüfungsthemen:
| Abschnitt | Ziele |
|---|---|
| Thema 1: Reaktion auf Sicherheitsvorfälle und Wiederherstellung im ICS-Bereich | - Wiederherstellung und Aufrechterhaltung des Betriebs
|
| Thema 2: Sicherheitsarchitektur und Schutzmaßnahmen für ICS | - Mehrschichtige Sicherheitsstrategien
|
| Thema 3: Steuerung, Richtlinien und Einhaltung von Vorschriften im ICS-Bereich | - Entwicklung von Sicherheitskonzepten
|
| Thema 4: Bedrohungen, Schwachstellen und Risikomanagement im ICS-Bereich | - Schwachstellen und Angriffsflächen
|
| Thema 5: ICS-Komponenten, Architektur und Protokolle | - Kommunikation und Protokolle
|
GIAC Global Industrial Cyber Security Professional (GICSP) GICSP Prüfungsfragen mit Lösungen
Frage #1
What is the primary purpose of encryption in wireless communication within ICS networks?
Response:
- A. To improve signal strength
- B. To reduce the amount of data transmitted
- C. To protect data from unauthorized access during transmission
- D. To increase data transmission speed
Antwort: C 🗳️
Frage #2
Which device is typically found at Level 3 of the Purdue Reference Architecture?
Response:
- A. Enterprise Resource Planning (ERP) systems
- B. SCADA systems
- C. Sensors
- D. Distributed Control Systems (DCS)
Antwort: B 🗳️
Frage #3
You are tasked with securing a new Linux-based ICS system. Which of the following actions should be taken during the initial configuration to harden the endpoint?
(Select all that apply)
Response:
- A. Remove unnecessary software packages
- B. Disable root login over SSH
- C. Set strong passwords for all user accounts
- D. Enable file sharing on all directories
Antwort: A,B,C 🗳️
Frage #4
Which of the following is a common risk associated with Bluetooth Low Energy (BLE) communication in ICS environments?
Response:
- A. Vulnerability to replay attacks
- B. High power consumption
- C. Limited range for communication
- D. Lack of support for encryption
Antwort: A 🗳️
Frage #5
As part of the security architecture for Level 3, you need to ensure that SCADA systems are protected from potential cyberattacks. Which of the following actions should be included in your security strategy?
(Select all that apply)
Response:
- A. Implement strong authentication for SCADA system access
- B. Use encryption for data transmitted between SCADA systems and Level 2 devices
- C. Regularly monitor network traffic for suspicious activity
- D. Disable all firewalls to improve system performance
Antwort: A,B,C 🗳️
1124 Kundenbewertungen
