GIAC GICSP Industrial Cyber Security Professional Practice Test
GIAC GICSP Industrial Cyber Security Professional के लिए अपना आत्मविश्वास बढ़ाएँ। अवधारणाओं का अभ्यास करें, उत्तरों को समझें और हर सवाल के साथ अपना ज्ञान मज़बूत करें।
एक नमूना सवाल आज़माएँपरीक्षा का परिचय और विवरण
GIAC ICS सुरक्षा प्रमाणन जो परिचालन प्रौद्योगिकी सुरक्षा, SCADA सिस्टम, PLC प्रोग्रामिंग, और औद्योगिक नेटवर्क सुरक्षा मूल्यांकन को कवर करता है।
नमूना प्रश्न
अभ्यास कैसे काम करता है, यह जानने के लिए एक उत्तर चुनें और व्याख्या देखें।
A new edition of NIST SP 800-82 (Rev 3, 2023) is referenced by a power-utility security manager for OT-specific control overlays. Which statement BEST captures the relationship of NIST 800-82 Rev 3 to NIST SP 800-53 controls?
A defender is integrating ICS log sources into a SIEM. The logs include EWS Sysmon, switch flow data, IDMZ jump-host session records, and a Historian's audit log. Which correlation rule provides the HIGHEST detection value for an unauthorized PLC programming attempt?
A defender is reviewing a vendor's claim that its PLC firmware uses 'cryptographically signed boot images.' The defender asks for evidence. Which artifact is the MOST useful to verify the claim?
A control engineer at a power plant is procuring a new EWS. The OT security team requires the EWS to support FIPS 140-2/3 validated cryptographic modules for any TLS used by vendor tools. Why does this matter operationally, and what is the SECONDARY consideration?
A vulnerability advisory published by CISA describes a heap-overflow in the firmware of a widely deployed Siemens S7-1500 PLC, with CVSS 9.8. The plant must continue operating. Which action sequence is MOST consistent with ICS-appropriate vulnerability management practice?
करियर के अवसर और वेतन
जब तक लोकल रेंज न दिखे, ये US मार्केट के आंकड़े हैं।
इस परीक्षा में क्या शामिल है
01Hardening & Protecting Endpoints
This domain focuses heavily on securing endpoint devices, executing hardening procedures, and protecting operating systems used within unique industrial control environments and operational technology networks against potential intrusions.
02ICS Components & Architecture
Candidates explore industrial control system components, underlying architectures, and typical operational topologies to understand how different hardware and software layers interact within the overall production framework and enterprise structure.
03ICS Overview & Concepts
This section covers the fundamental concepts, basic principles, and operational overviews of industrial control systems, establishing a strong baseline for understanding broader technology deployments across various manufacturing and utility sectors.
04ICS Program & Policy Development
This domain addresses the systematic development of governance programs, security policies, and administrative guidelines specifically tailored for complex industrial cybersecurity and operational technology environments operating under strict regulatory demands.
05Intelligence Gathering & Threat Modeling
Learners focus on gathering actionable intelligence and performing threat modeling exercises designed to identify vulnerabilities and predict adversary movements within industrial settings while maintaining high levels of system availability.
06PERA Level 0 & 1 Technology Overview and Compromise
This topic examines Purdue Enterprise Reference Architecture Level 0 and Level 1 physical technologies, underlying hardware components, and associated compromise vectors that threaten fundamental industrial processes and field devices.
07PERA Level 2 & 3 Technology Overview and Compromise
This domain covers Purdue Enterprise Reference Architecture Level 2 and Level 3 supervisory control technologies, networking components, and the specific compromise vectors affecting these intermediate layers within the automation pyramid.
08Protocols, Communications, & Compromises
Registered candidates analyze communication protocols utilized across industrial systems, reviewing their unique messaging structures alongside respective security vulnerabilities and potential compromise methods during active facility operations in modern industrial plant environments.
09Risk Based Disaster Recovery & Incident Response
This area focuses on risk-based disaster recovery planning, business continuity strategies, and structured incident response procedures tailored specifically for responding to operational emergencies in industrial environments and energy plants.
10Wireless Technologies & Compromises
Registered candidates examine wireless communication technologies deployed in modern industrial settings, thoroughly evaluating their architectural designs, implementation challenges, and associated security compromises impacting remote site connectivity during critical operational tasks.