Free GIAC GRID Exam Dumps Questions & Answers

What is the role of event logs in monitoring ICS systems?

• A.They increase system storage capacity
• B.They reduce energy consumption
• C.They record system events, which help in detecting anomalies and investigating incidents
• D.They store financial information

Your team has deployed an active defense mechanism in an ICS environment, which has recently detected abnormal traffic patterns between a Human-Machine Interface (HMI) and a remote IP address.
How should you proceed with investigating and mitigating this issue?

• A.Ignore the abnormal traffic, as it may resolve itself
• B.Disable the HMI permanently
• C.Review the traffic logs, investigate the remote IP address, apply network segmentation to isolate the HMI, and alert the security team
• D.Increase the HMI's processing power

Which of the following is a recommended practice for maintaining visibility in an ICS environment?

• A.Continuously monitoring network traffic to detect new or unauthorized devices
• B.Disconnecting devices from the network
• C.Using unmonitored third-party software
• D.Removing network access for all users

What is the main reason for documenting and maintaining a comprehensive asset inventory in an ICS environment?

• A.To improve system performance
• B.To increase the number of connected devices
• C.To ensure that all assets are accounted for and properly secured against potential threats
• D.To track employee progress

What is the key difference between active defense and passive defense in ICS security?

• A.Passive defense requires continuous human monitoring, while active defense is fully automated
• B.Active defense involves real-time threat detection and response, while passive defense focuses on preventing attacks by implementing static defenses
• C.Passive defense is more effective than active defense in ICS environments
• D.Active defense is more focused on physical security, while passive defense focuses only on cybersecurity