OTArmor L1 Test – ICS/OT Cyber Security

QUIZ START

#1. The VMWare ESXi host web interface (GUI) is accessed from:

Any machine on the Domain

DC1

DR1

#2. On what Virtual Machine does the McAfee ePO Application reside?

CA1

RDS1

EWS1

SP1

DR1

DC1

#3. Which of the following is the Application Server, containing SolarWinds® CatTools™ and Acronis Backup Management System?

LM1

VH1

DC1

SP1

PM1

CA1

DR1

AP2

AP1

#4. What is the minimum password length in the password policy?

#5. To install the monthly patch updates:

Place the patch DVD in the VH1 DVD drive, log in to PM1, attach the drive to SP1, and copy the files.

Place the patch DVD in the VH1 DVD drive, attach the drive to PM1, log in to PM1, and copy the files.

#6. When trying to enter domain credentials in a SecureSuite application, you must press _______________ to open the login dialog for a VM. a. Ctrl + Alt + Delete

Actions – Ctrl-Alt-Delete

Ctrl + Alt + Insert

Shift + Alt + Insert

Ctrl + Alt + Delete

#7. McAfee uses a ruleset to apply Whitelisting, True or False, is this function applied from the ePO?

True

False

#8. The CA Server (CA1):

Issues and revokes digital certificates.

Provides the entry point for security managers to administer security-related applications.

Is the central repository for cyber-security event and log data

#9. In Active Directory, a security group is:

A pre-configured user or device role

A management point for password policy settings

A group of users who all share a single username

#10. What happens during a secure socket layer (SSL) handshake?

The client and server agree on connection security parameters

The CA server informs the controller that access is granted or rejected

The controller requests the CRL from the CA server

#11. Based on the policies BHBHGE has defined, when a potential threat is detected, the McAfee application will:

Prompt the user to determine whether to block or clean up the file

Block access to the file

Automatically clean up the file

#12. How would an installation of the OTArmor/SecurityST solution at a nuclear power plant differ from a typical installation?

Outer Edge Switches are not permitted

A separate OTArmor/SecurityST Appliance is required for each reactor

The required topology is a ring network

#13. What are the BHGE standards IP addresses of VH1,DC1,DC2 and CA1 servers:

#14. The default settings used for backups limit any one node to use no more than _____ of the available network loading

20%

10%

25%

#15. Which level of the standard Network Architecture does the OTArmor/SecurityST system reside on?

Level 2

Level 4

Level 1

Level 3

Level 5

Level 0

#16. Where would you look if you needed to find the Security State for each configured controller?

System Editor > Security State

Component InfoView > Status tab

Security State > Authenticated

#17. Which of the following does NOT describe a benefit of Cisco switches?

Centralized updating and patching independent of the OTArmot/SecurityST Appliance

Layer 2 Threat Defense

Improved Broadcast and Multicast Storm Control

#18. To confirm that individual certificates have been revoked, you must:

Validate the revoked certificates

Publish the revoked certificates

Delete the revoked certificates

#19. The McAfee software has been implemented in this solution because this anti-virus application includes:

A centralized management console, using individual agents installed on each HMI under security management

Host Intrusion Detection functionality

An exclusively online updating process

#20. Which of the following virtual machines is considered optional for Compact configurations?

SP1

CA1

DC1

AP3

#21. In order for a network switch to verify a user’s access rights, the switch must first:

Contact a RADIUS server in which it has been defined as an allowed client

Request membership in the Network Administrators group

Supply the shared secret and user credentials to Active Directory

#22. The NIDS device:

Builds upon the Microsoft Active Directory system to prevent network intrusion

Is a standalone device that monitors network traffic and logs issues to the SIEM application

Is a network traffic monitoring device attached to each leaf switch in the star topology used in the OTArmor/SecurityST network configuration

#23. When deploying patches, which of the following is true?

You can deploy multiple patches and multiple Service Packs at a time to multiple computers

You can deploy multiple patches at a time to multiple computers

You can deploy multiple patches at a time to only one computer

You can deploy only one patch at a time to only one computer

#24. What are the default groups the BHGEOper account is a Member Of?

#25. True or False, the High Availability (HA) option includes both hardware and data redundancy for security?

False

True

#26. A data diode is designed to pass data:

From the “high” side to the “low” side

From the “low” side to the “high” side

In either direction, depending on the configuration of the device’s security settings

#27. Which Splunk application would you use to obtain information about failed logons?

Active Directory

Security

Change Management

#28. Which of the following provides the real-time analysis of security alerts generated by network hardware and applications, and is used to log security data and generate reports for compliance purposes?

SEM

SIEM

SIM

#29. When does the root certificate need to be updated?

When a new HMI logs in for the first time

When domain authentication is required

When the system is turned over to the customer

#30. OTArmor/SecurityST uses virtualization technology to minimize security lifecycle costs and provide enhanced recovery capabilities?

True

False

#31. If you change a domain policy setting:

Every HMI that logs in will receive the updated setting

New HMIs will receive the updated setting, but HMIs that were already set up in the system will not receive it

The user will be prompted to select either the old or the new setting

#32. Splunk is:

A browser-based Unified Threat Management (UTM) device

A Network Intrusion Detection System (NIDS) application

A browser-based interface to security-related log and event information

#33. When McAfee solidcore is in Observer Mode:

Application Control isn't running on your system. Although the application is installed, its features are disabled

This mode indicates that protection is effective but changes are allowed on protected endpoints

This mode indicates that Application Control is running and protection is enabled

The application does not prevent any execution or changes made to the endpoints. Instead, it monitors execution activities and compares them with the local inventory and predefined rules

#34. The bridge on the top of the network Spanning Tree is what kind of switch?

Edge

Outer Edge

Root

Bridge

#35. In the Cisco FlexStack:

Members behave as one logical switch

A cross-over cable is used to stack switches

Failover and recovery are built in, but replacement requires an outage

#36. True or False, McAfee Application Control prevents users from accessing applications?

True

False

#37. What problem is associated with retrofit installations and SFPs?

Retrofit installs usually use Single Mode Fiber Optic Cable, which has SC connectors that do not plug directly into the SFP

Retrofit installs usually use Single Mode Fiber Optic Cable, which has LC connectors that do not plug directly into the SFP.

Retrofit installs usually use Multi-Mode Fiber Optic Cable, which has LC connectors that do not plug directly into the SFP

Retrofit installs usually use Multi-Mode Fiber Optic Cable, which has SC connectors that do not plug directly into the SFP

#38. From an admin command prompt, what command is used to check the status of the Application Control an HMI or VM?

sadmin status

sadmin recover

sadmin enable

sadmin info

sadmin lockdown

#39. What is a GFS (Grandfather – Father – Son ) backup scheme?

A differential backup once per day for a week, an incremental backup once per week for a month, and a full backup once per month for a year

An incremental backup once per day for a week, a differential backup once per week for a month, and a full backup once per month for a year

An incremental backup once per day for a week, a full backup once per week for a month, and a differential backup once per month for a year

#40. What does the DLP (Data Loss Prevention) application do?

Allow access hard drives

Prevent user access to USB/DVD/CD drives

Prevent downloads to the Mark VIe controller

Prevent user access to different applications

#41. Controls traffic (i.e., the network traffic to and from our controllers and HMIs) resides on the:

MDH

EGD

UDH

PDH

#42. Which term below refers to settings that can be applied to computers that join the domain, as well as the enforcement of required configuration settings?

Group Policy

ANIXIS Password Management

Certificate Authority

#43. The Security Server (VH1) is?

A virtual machine that serves as the Primary Domain Controller

A hardened computer running the VMware vSphere Hypervisor environment

#44. If you needed to change an individual’s assigned role, which dialog would you need to use?

Group Policy Management

Roles

Network Policy Server

#45. If you needed to turn off a port, how would you do so?

From SP1, use the Putty – SSH Terminal application

From DC1, use the CatTools application

From DR1, use the CatTools application

From DR1, use the Putty – SSH Terminal application

#46. If you change a domain policy setting:

New HMIs will receive the updated setting, but HMIs that were already set up in the system will not receive it

The user will be prompted to select either the old or the new setting

Every HMI that logs in will receive the updated setting

#47. How many users can be logged on to one server at one time?

#48. When deploying an agent from the McAfee ePO, do you?

Select Device, Select Actions – Agent – Deploy Agents

Select Device, Select Actions – Agent – Run Client Task

#49. For a controller running in the secure state, what role is played by the ControlST software

It retrieves the user certificate and uses it to establish a secure connection to the controller

It issues the user certificate, which the controller recognizes as secure

#50. How would you locate in the ePO where the Policy Catalog is?

System Tree

Dashboards

#51. What is the maximum number of HMIs that a OTArmor/SecurityST Standard be configured for?

#52. Which CatTools feature would you use to create a backup of the network switch configuration?

Activity Wizard

Setup

Device Wizard

#53. You would use the Splunk FISMA application to:

Display user record changes and computer account changes

Display reports for reviewing log data related to Microsoft Active Dire

Display reports that comply with SP 800-52 requirements

#54. Which of the following is the Backup Domain Controller?

DR1

SP1

DC1

DC2

VH1

PM1

LM1

VH2

#55. When making a switch configuration change, which command would you use to save the new configuration?

config t

Ctrl + Z

wr mem

Ctrl + S

#56. If you were going to set up a new user in the Server Manager, you would find the list of GE accounts in which set of folders?

Network Policy and Access Services

Active Directory Domain Services

DNS Server

#57. Load balancing Virtual Machines is a feature that allows VMs to be run on different hosts, which version of OTArmor/SecurityST uses this feature?

SecurityST/OTArmor

SecurityST/OTArmot Standard

Compact Secure

SecurityST/OTArmor Pro

#58. What type of OTArmor/SecurityST configuration is made when you have VH1, VH2 & VH3?

Standard

Compact

Pro

#59. Which of the following does NOT describe a benefit of Active Directory?

It eliminates the need for RADIUS authentication

It helps customers address NERC and other compliance requirements

Many controls extend from or leverage Active Directory

Finish

Results

Congratulation you pass the exam!!!

Sorry, it is time to review concepts and try again

CYB3R53C

Cybersecurity Starts Here: Explore, Learn, and Secure Your Operations

#1. The VMWare ESXi host web interface (GUI) is accessed from:

#2. On what Virtual Machine does the McAfee ePO Application reside?

#3. Which of the following is the Application Server, containing SolarWinds® CatTools™ and Acronis Backup Management System?

#4. What is the minimum password length in the password policy?

#5. To install the monthly patch updates:

#6. When trying to enter domain credentials in a SecureSuite application, you must press _______________ to open the login dialog for a VM. a. Ctrl + Alt + Delete

#7. McAfee uses a ruleset to apply Whitelisting, True or False, is this function applied from the ePO?

#8. The CA Server (CA1):

#9. In Active Directory, a security group is:

#10. What happens during a secure socket layer (SSL) handshake?

#11. Based on the policies BHBHGE has defined, when a potential threat is detected, the McAfee application will:

#12. How would an installation of the OTArmor/SecurityST solution at a nuclear power plant differ from a typical installation?

#13. What are the BHGE standards IP addresses of VH1,DC1,DC2 and CA1 servers:

#14. The default settings used for backups limit any one node to use no more than _____ of the available network loading

#15. Which level of the standard Network Architecture does the OTArmor/SecurityST system reside on?

#16. Where would you look if you needed to find the Security State for each configured controller?

#17. Which of the following does NOT describe a benefit of Cisco switches?

#18. To confirm that individual certificates have been revoked, you must:

#19. The McAfee software has been implemented in this solution because this anti-virus application includes:

#20. Which of the following virtual machines is considered optional for Compact configurations?

#21. In order for a network switch to verify a user’s access rights, the switch must first:

#22. The NIDS device:

#23. When deploying patches, which of the following is true?

#24. What are the default groups the BHGEOper account is a Member Of?

#25. True or False, the High Availability (HA) option includes both hardware and data redundancy for security?

#26. A data diode is designed to pass data:

#27. Which Splunk application would you use to obtain information about failed logons?

#28. Which of the following provides the real-time analysis of security alerts generated by network hardware and applications, and is used to log security data and generate reports for compliance purposes?

#29. When does the root certificate need to be updated?

#30. OTArmor/SecurityST uses virtualization technology to minimize security lifecycle costs and provide enhanced recovery capabilities?

#31. If you change a domain policy setting:

#32. Splunk is:

#33. When McAfee solidcore is in Observer Mode:

#34. The bridge on the top of the network Spanning Tree is what kind of switch?

#35. In the Cisco FlexStack:

#36. True or False, McAfee Application Control prevents users from accessing applications?

#37. What problem is associated with retrofit installations and SFPs?

#38. From an admin command prompt, what command is used to check the status of the Application Control an HMI or VM?

#39. What is a GFS (Grandfather – Father – Son ) backup scheme?

#40. What does the DLP (Data Loss Prevention) application do?

#41. Controls traffic (i.e., the network traffic to and from our controllers and HMIs) resides on the:

#42. Which term below refers to settings that can be applied to computers that join the domain, as well as the enforcement of required configuration settings?

#43. The Security Server (VH1) is?

#44. If you needed to change an individual’s assigned role, which dialog would you need to use?

#45. If you needed to turn off a port, how would you do so?

#46. If you change a domain policy setting:

#47. How many users can be logged on to one server at one time?

#48. When deploying an agent from the McAfee ePO, do you?

#49. For a controller running in the secure state, what role is played by the ControlST software

#50. How would you locate in the ePO where the Policy Catalog is?

#51. What is the maximum number of HMIs that a OTArmor/SecurityST Standard be configured for?

#52. Which CatTools feature would you use to create a backup of the network switch configuration?

#53. You would use the Splunk FISMA application to:

#54. Which of the following is the Backup Domain Controller?

#55. When making a switch configuration change, which command would you use to save the new configuration?

#56. If you were going to set up a new user in the Server Manager, you would find the list of GE accounts in which set of folders?

#57. Load balancing Virtual Machines is a feature that allows VMs to be run on different hosts, which version of OTArmor/SecurityST uses this feature?

#58. What type of OTArmor/SecurityST configuration is made when you have VH1, VH2 & VH3?

#59. Which of the following does NOT describe a benefit of Active Directory?

Results

Congratulation you pass the exam!!!

Sorry, it is time to review concepts and try again

Stay tuned

Copyright 2025 © All rights Reserved. Design by Elementor