SecOT+ Physical and Cyber Security Integration Quiz

1. In OT security, what does 'safety instrumented systems' (SIS) refer to?

Systems designed to prevent hazardous conditions and protect personnel

Systems that monitor employee behavior

Backup power supplies for data centers

Physical security cameras

2. Which of the following is essential for OT security governance?

Clear policies, roles, responsibilities, and accountability structures

Allowing employees to set their own security rules

Avoiding documentation of security procedures

Delegating all security decisions to IT alone

3. In SecOT+ certification, what does convergence of physical and cyber security mean?

Integrating physical access controls with network security monitoring for comprehensive protection

Replacing physical security with only cyber tools

Keeping physical and cyber security completely separate

Eliminating the need for either physical or cyber security

4. What is the importance of asset inventory management in OT security?

It enables identification of vulnerabilities and unauthorized devices on the network

It is only needed for IT systems

It has no security value

It increases operational costs

5. Which type of threat involves an attacker gaining persistent access to OT networks?

Advanced Persistent Threat (APT)

Distributed Denial of Service (DDoS)

Social engineering

Password brute force

6. What is a critical consideration when implementing security updates in OT systems?

Testing updates in non-production environments first to avoid disrupting operations

Applying all updates immediately without testing

Never updating systems to avoid downtime

Updating only on weekends

7. In OT environments, what does 'defense in breadth' emphasize?

Protecting multiple assets and entry points across the entire infrastructure

Using only one security tool

Installing security only at the main entrance

Focusing security efforts on a single system

8. Which control helps detect unauthorized changes to OT equipment?

Configuration management and integrity monitoring

Removing all audit logs

Disabling change notifications

Using default passwords

9. What is the primary objective of an OT security incident response plan?

To rapidly detect, contain, and recover from security incidents while maintaining safety

To prosecute attackers immediately

To shut down all systems without notice

To eliminate all employee access

10. Which authentication method is most secure for OT critical systems?

Multi-factor authentication with strong credential management

Single password shared among operators

No authentication for convenience

Biometric scanning alone without additional factors

11. What is the primary difference between IT security and OT security?

OT security prioritizes availability and safety; IT security prioritizes confidentiality and data integrity

OT security is easier to implement than IT security

OT security does not require network connectivity

OT security focuses only on physical locks and access cards

12. What is the purpose of network segmentation in OT environments?

To limit lateral movement and contain breaches

To increase network bandwidth

To simplify network administration

To eliminate the need for firewalls

13. Which of the following is a primary threat to OT systems?

Legacy equipment with unpatched vulnerabilities

Modern operating systems that are too secure

Employee training programs

Regular security updates

14. What is the role of a demilitarized zone (DMZ) in OT network architecture?

A buffer zone between corporate IT and OT networks with controlled access

A physical barrier made of concrete

An area where all security controls are disabled

A zone for temporary employee workstations

15. Which framework is commonly used for OT security assessment and compliance?

NIST Cybersecurity Framework and IEC 62443

ISO 27001 only

PCI DSS exclusively

HIPAA standards

16. In the context of OT security, what does 'air-gapping' mean?

Physically isolating critical systems from external networks

Using compressed air to cool servers

Installing ventilation systems in data centers

Creating gaps in firewall rules

17. What is a critical control in preventing unauthorized access to OT equipment?

Multi-factor authentication and physical badging systems

Using simple passwords

Allowing remote access without VPN

Disabling all audit logging

18. Which security model emphasizes that physical and cyber threats must be managed together in OT?

Zero Trust Architecture

Physical-Cyber Convergence Model

Isolated Network Model

Perimeter Security Model

19. In OT security, what does SCADA stand for?

Supervisory Control and Data Acquisition

System Control and Defensive Architecture

Secure Communication and Data Analysis

Sensor-based Cyber Anomaly Detection Array

20. Which of the following best describes defense-in-depth for OT environments?

Installing multiple firewalls at the network perimeter

Layering physical, network, and application controls to protect critical assets

Using only encryption for all data

Limiting employee access to one system per person

SecOT+ Physical and Cyber Security Integration for OT Quiz