Nation State ICS Threat Actors & APT Groups

1. Which of the following best describes the Purdue Model in ICS security?

A malware detection system

A network segmentation framework for industrial environments

A threat actor classification system

A data encryption standard

Submit

7. Which intelligence source provides real-time indicators of compromise (IOCs) for ICS threats?

CISA alerts and advisories

Commercial threat feeds

Academic research papers

Both A and B

8. The Oldsmar water treatment facility attack in 2021 demonstrated which vulnerability?

Unpatched Windows systems only

Exposed remote access to operational systems

Malware in USB drives

DDoS attacks on firewalls

9. What is the primary challenge in defending legacy ICS systems against nation-state threats?

Systems often lack security updates and patching mechanisms

They use too much electricity

They are located overseas

They require internet connectivity

10. APT41, with links to China, is known for targeting which sectors?

Only financial institutions

Healthcare, telecommunications, and technology

Only government agencies

Exclusively critical infrastructure

11. Which nation-state actor is known for the Stuxnet campaign targeting Iranian nuclear facilities?

Russia

Israel and United States

China

North Korea

12. What is a common initial access vector used by nation-state actors targeting ICS?

Phishing emails with malicious attachments

Direct exploitation of internet-exposed services

Supply chain compromise

All of the above

13. The MITRE ATT&CK framework for ICS focuses on which of the following?

Tactics, techniques, and procedures specific to operational technology

Only desktop malware signatures

Physical security measures

Employee training programs

14. Which Russian APT group conducted the 2015 Ukraine power grid attack?

APT28

Sandworm Team

APT29

Turla

15. APT33, attributed to Iran, has targeted which industries with ICS focus?

Retail and finance

Aviation and energy sectors

Healthcare and education

Entertainment and media

16. What is the primary objective of threat intelligence in defending ICS environments?

Increase network bandwidth

Identify, assess, and mitigate threats before exploitation

Replace all legacy systems

Eliminate all network traffic

17. The Triton/TRISIS malware targeted which critical infrastructure sector?

Power generation

Water treatment

Safety instrumented systems in industrial plants

Oil and gas pipelines

18. Which attack framework is commonly used by nation-state actors to establish persistent access to ICS networks?

MITRE ATT&CK

NIST Cybersecurity Framework

Kill Chain Model

Zero Trust Architecture

19. APT28, also known as Fancy Bear, is primarily attributed to which country?

China

Russia

Iran

North Korea

20. What does SCADA stand for in industrial control systems?

Supervisory Control and Data Acquisition

Secure Communication and Defense Architecture

System Control Analysis and Diagnostic Array

Synchronized Control and Automated Distribution

SecOT+ Nation State Threat Actors Targeting ICS Quiz