A company transmits sensitive customer information across its network. Which of the following technologies should it use to protect data in motion?

• AES encryption

• TLS or IPsec

• Full disk encryption

• Access control lists

Which of the following methods would best protect a database stored on a server from unauthorized access?

• Encrypting the database with AES

• Using a firewall to block unauthorized users

• Implementing a VPN for remote access

• Using TLS encryption

Which entity is responsible for digitally signing and issuing certificates to verify the authenticity of websites and users?

• Firewall

• Certificate Authority (CA)

• Intrusion Prevention System (IPS)

• File Integrity Checker

A company assigns employees to specific job roles and grants access permissions accordingly. This is an example of:

• Mandatory Access Control (MAC)

• Multi-Factor Authentication (MFA)

• Discretionary Access Control (DAC)

• Role-Based Access Control (RBAC)

Which of the following best describes the Principle of Least Privilege (PoLP)?

• Users should have administrator access to all systems

• Users should be granted only the minimum permissions necessary to perform their job functions

• All users must be assigned to a single security group

• Users should have full access to their department's data

A company wants to ensure that employees can only access their work applications while connected to the corporate VPN. Which method would enforce this?

• Digital Certificate Signing

• Network Access Control (NAC)

• File Integrity Monitoring

• Role-Based Access Control

Which of the following best describes the security strategy for SCADA networks?

• Complete isolation from external networks

• Full integration with public internet

• Allowing remote access for all employees

• Using strong passwords only

What is the primary reason for segmenting IIoT devices from other networks?

• To increase device efficiency

• To ensure real-time communication remains uninterrupted

• To allow external users access to IIoT devices

• To improve wireless connectivity

Why is network segmentation critical for SCADA and ICS systems?

• To ensure restricted access to industrial control systems

• To increase download speeds

• To allow remote access from any device

• To enhance corporate email security

What is the main reason Operational Technology (OT) networks are segmented from traditional IT networks?

• To allow faster internet browsing

• To prevent cyberattacks from disrupting critical infrastructure

• To enable employees to connect personal devices

• To reduce firewall costs