Cybersecurity Threats to Critical Infrastructure

1. Which of the following is an example of a physical safety hazard caused by a cyberattack on a water system?

Loss of employee email access

Manipulation of chemical dosing controls, risking contamination, or toxic release

Delayed software updates on office computers

Increased network traffic on the corporate IT system

2. What does zero-trust architecture require?

Trusting all internal users by default

Removing all firewalls to increase speed

Verifying every user, device, and connection before granting access

Allowing unrestricted access within the OT network

3. What is the purpose of maintaining a software bill of materials (SBOM)?

To track employee software licenses

To review third-party software dependencies for hidden vulnerabilities

To document the number of computers in the organization

To create a backup of the corporate IT network

4. Which of the following best describes the concept of least-privilege access?

All employees share the same system login credentials

IT administrators have unlimited access to all systems

Personnel can only access the systems necessary for their specific role

Access is granted based on seniority within the organization

5. What is a key reason to maintain offline, tested backups of critical system configurations?

To reduce the need for cybersecurity training

To allow vendors unlimited remote access

To ensure systems can be restored after a ransomware or cyberattack

To comply with clean desk policies