SecOT+ Purdue Model ICS Architecture Quiz

1. What is the primary purpose of a Demilitarized Zone (DMZ) in ICS architecture?

Store operational data only

Create a controlled buffer between enterprise IT and control networks

Eliminate all network security

Replace firewalls entirely

2. Which level in the Purdue Model typically includes Human-Machine Interfaces (HMIs)?

Level 0

Level 1

Level 2

Level 4

3. Which of the following best describes a zone in Purdue Model architecture?

A geographic location only

A logical network segment with defined security policies

A single computer

An external internet connection

4. What is the primary distinction between IT and OT systems in terms of objectives?

IT prioritizes data; OT prioritizes process continuity and safety

OT is older technology only

IT and OT have identical objectives

OT does not require cybersecurity

5. True or False: The Purdue Model is specifically designed for IT systems and not applicable to OT environments.

True

False

6. Which security architecture principle involves deploying multiple layers of defense?

Single-point protection

Defense-in-depth

Perimeter-only defense

Zero-trust elimination

Submit

8. In ICS architecture, what is the primary function of Level 1?

Direct machine control and sensor input

Enterprise resource planning

Business intelligence and analytics

External communication with suppliers

9. True or False: Operational Technology (OT) systems prioritize availability and safety over confidentiality.

True

False

10. Which of the following is a key component of SecOT+ security foundations?

Risk assessment and management

Defense-in-depth strategies

Continuous monitoring and incident response

All of the above

11. What does SCADA stand for in the context of industrial control systems?

Supervisory Control and Data Acquisition

System Control and Digital Analysis

Secure Communications and Device Authentication

Sensor Control and Data Aggregation

12. True or False: The Purdue Model allows direct connection between enterprise IT networks and Level 0 field devices without intermediate security layers.

True

False

13. Which security principle ensures that only authorized personnel can access critical ICS components?

Availability

Confidentiality

Access Control

Non-repudiation

14. The Purdue Model divides ICS architecture into hierarchical levels. Which level represents enterprise IT systems and business operations?

Level 0 - Field Devices

Level 1 - Control Systems

Level 3 - Manufacturing Operations

Level 4 - Business Logistics

Submit

18. True or False: Firewalls between Purdue Model zones are optional in SecOT+ security design.

True

False

Submit

20. True or False: SecOT+ emphasizes that security and operational safety are mutually exclusive concerns.

True

False

SecOT+ The Purdue Model for ICS Architecture Quiz

1. What is the primary purpose of a Demilitarized Zone (DMZ) in ICS architecture?

2.

What first name or nickname would you like us to use?

2. Which level in the Purdue Model typically includes Human-Machine Interfaces (HMIs)?

3. Which of the following best describes a zone in Purdue Model architecture?

4. What is the primary distinction between IT and OT systems in terms of objectives?

5. True or False: The Purdue Model is specifically designed for IT systems and not applicable to OT environments.

6. Which security architecture principle involves deploying multiple layers of defense?

7. A network segmentation strategy in the Purdue Model aims to ____ lateral movement of threats.

8. In ICS architecture, what is the primary function of Level 1?

9. True or False: Operational Technology (OT) systems prioritize availability and safety over confidentiality.

10. Which of the following is a key component of SecOT+ security foundations?

11. What does SCADA stand for in the context of industrial control systems?

12. True or False: The Purdue Model allows direct connection between enterprise IT networks and Level 0 field devices without intermediate security layers.

13. Which security principle ensures that only authorized personnel can access critical ICS components?

14. The Purdue Model divides ICS architecture into hierarchical levels. Which level represents enterprise IT systems and business operations?

15. The Purdue Model's conduit layer serves to ____.

16. In SecOT+ frameworks, asset inventory and ____ are critical foundations.

17. In the Purdue Model, Level 0 consists of ____.

18. True or False: Firewalls between Purdue Model zones are optional in SecOT+ security design.

19. The concept of 'air-gapping' in ICS security refers to ____.

20. True or False: SecOT+ emphasizes that security and operational safety are mutually exclusive concerns.