Exercise: Information and Computer Security

Sensitive information assets at nuclear facilities include:

• Details of physical security systems, personnel systems and plans

• Details on type, quantity, quality, and location of nuclear and other radioactive materials housed at the facility

• Transport information, schedules, and security for the movement of nuclear materials

• All above are true

What are the three principle of information security?

• Confidentiality, information, alert

• Confidentiality, Integration, attack prevention

• Confidentiality, integrity, availability

• Consistency, integrity, alert

Which of the following computer security controls describes :

Policy, procedures and practices designed to protect computer systems through personnel behaviors. These are directive in nature specifying what employees should and should not do.

• Administrative controls

• Physical controls

• Technical controls

• Legal controls

The following steps are not mention in Implementing Information Security using Graded approach

• Identification of sensitive information and assets

• Identification of compromise impact/risk

• Designation senior management’s to create a computer security programme

• Designation of appropriate information security measures

The Computer Security programme is focused on preventing computer acts that could directly or indirectly lead to:

1. unauthorized removal of nuclear/other radioactive material

2. Data breaching of nuclear unclassified information

3. sabotage against nuclear material or nuclear facilities

4. theft of nuclear sensitive information

The correct statement are:

• 1,2,3

• 1,2,4

• 1,3,4

• 2,3,4

A person or group of persons with motivation, intention and capability to commit a malicious act and actually attempting such an act, is called :

• threat

• adversary

• hacker

• Terrorists

A reconnaissance is the efforts to collect as much information as possible before launching cyber attacks. Which of step in attack-chain does the reconnaissance referred to?

• Engagement

• Preparation

• Presence

• Compromise

The following are examples of OT in Physical Protection System (PPS), except:

• Explosive Detection

• Turbine Control

• Access Control

• Video Surveillance