[NEW] Global Industrial Cyber Security Professional (GICSP)

ICS Components & Architecture (14%): Mastering the Purdue Model levels, zone/conduit segmentation, and identifying device types across the industrial architecture.

Hardening & Protecting Endpoints (10%): Implementing security software, managing industrial patch cycles, and establishing secure configuration baselines.

ICS Program & Policy Development (9%): Navigating the security program lifecycle and aligning with industrial compliance frameworks.

Intelligence Gathering & Threat Modeling (8%): Identifying the threat landscape and applying threat modeling methodologies specifically to industrial assets.

PERA Level 0 & 1 Technology Overview and Compromise (10%): Securing sensors, actuators, and controllers at the physical process level against common attack vectors.

PERA Level 2 & 3 Technology Overview and Compromise (12%): Protecting HMIs, SCADA systems, and engineering workstations from exploits.

Protocols, Communications, & Compromises (10%): Analyzing ICS protocol families (Modbus, DNP3, etc.) and securing industrial communications.

Risk Based Disaster Recovery & Incident Response (9%): Developing metrics-driven recovery plans and specialized incident response procedures for OT.

Wireless Technologies & Compromises (6%): Defending wireless protocols used in industrial settings against specialized threats.

B. Level 1

C. Level 2

D. Level 4

E. Level 5

F. The Enterprise Zone

Correct Answer: C

Explanation:

A (Incorrect): Level 0 represents the physical process (sensors and actuators).

B (Incorrect): Level 1 is the Basic Control level, primarily consisting of PLCs and RTUs.

D (Incorrect): Level 4 is the Site Business Planning and Logistics level (Business Network).

E (Incorrect): Level 5 is usually reserved for the Enterprise-wide network or Cloud.

F (Incorrect): The Enterprise Zone encompasses Levels 4 and 5, which are logically separated from the control levels.

Question 2: Why is traditional IT patch management often considered high-risk in an Operational Technology (OT) environment?

B. Industrial protocols like Modbus automatically encrypt all patches.

C. Unvetted updates can cause unexpected system reboots or latency, potentially leading to physical safety hazards or production downtime.

D. OT devices are naturally immune to malware.

E. Patching is only necessary for Level 4 business systems.

F. Anti-virus software handles all vulnerabilities automatically without the need for patches.

Correct Answer: C

Explanation:

A (Incorrect): Most modern HMIs and SCADA servers run on Windows or Linux and do require security updates.

B (Incorrect): Most legacy ICS protocols lack encryption and do not handle patch management.

D (Incorrect): OT systems are highly vulnerable to targeted malware like Stuxnet or Industroyer.

E (Incorrect): Vulnerabilities exist at all levels; Level 2 and 3 systems are frequent targets.

F (Incorrect): Anti-virus is only one layer of defense and cannot fix underlying software flaws like a patch can.

Question 3: Which protocol is commonly used in industrial environments for communication between a Master Station and Remote Terminal Units (RTUs) but lacks native authentication, making it susceptible to injection attacks?

B. SSH

C. DNP3

D. IPsec

E. PGP

F. TLS 1.3

Correct Answer: C

Explanation:

A, B, D, F (Incorrect): These are standard IT protocols designed with security (encryption/authentication) as a core feature.

E (Incorrect): PGP is used for email/file encryption, not for real-time industrial telemetry.

You can retake the exams as many times as you want

This is a huge original question bank

You get support from instructors if you have questions

Each question has a detailed explanation

Mobile-compatible with the Udemy app

30-days money-back guarantee if you're not satisfied