ICS Physical Security Operations 1 — Questions and Answers
Question 1: What is the principle of least privilege?
- Granting users only the minimum access necessary to perform their duties (Correct answer)
- Giving all users administrator access for convenience
- Restricting access only for external users
- Removing all access until requested
Correct answer: Granting users only the minimum access necessary to perform their duties
The principle of least privilege limits access to the minimum necessary for job functions, reducing the attack surface and potential impact of compromised accounts.
Question 2: Which authentication method provides the strongest security?
- Multi-factor authentication combining different verification types (Correct answer)
- Complex passwords alone
- Single sign-on without additional factors
- Security questions based on personal information
Correct answer: Multi-factor authentication combining different verification types
Multi-factor authentication combining different verification types (something you know, have, and are) provides the strongest protection against unauthorized access.
Question 3: What is the primary purpose of security auditing?
- To identify vulnerabilities and verify compliance with security policies (Correct answer)
- To find reasons to terminate employees
- To justify security spending
- To create busy work for the security team
Correct answer: To identify vulnerabilities and verify compliance with security policies
Security auditing identifies vulnerabilities, verifies policy compliance, and provides evidence of due diligence in protecting organizational assets.
Question 4: How should security incidents be handled?
- Following an established incident response plan with documentation (Correct answer)
- Fixing the issue and not reporting it
- Waiting to see if it happens again
- Blaming the affected user
Correct answer: Following an established incident response plan with documentation
Following an established incident response plan ensures consistent, effective handling while documentation supports analysis, compliance, and future prevention.
Question 5: What is the role of encryption in data security?
- Protecting data confidentiality during storage and transmission (Correct answer)
- Making data permanently inaccessible
- Replacing the need for access controls
- Only required for financial data
Correct answer: Protecting data confidentiality during storage and transmission
Encryption protects data confidentiality by making information unreadable without proper decryption keys, whether data is stored (at rest) or being transmitted (in transit).
Question 6: Why is regular security training important for all staff?
- Employees are often the weakest link in security and training reduces human error (Correct answer)
- It is only needed for IT staff
- It replaces the need for technical security controls
- It is only required annually for compliance
Correct answer: Employees are often the weakest link in security and training reduces human error
Regular security training reduces human error, the most common cause of security breaches, by keeping all staff aware of current threats and proper procedures.
ICS Physical Security Operations 1
What is the principle of least privilege?