Cyber Interns 2025 Week 3: OT Firewalls

Which of the following would be used to display summary of a capture file?

Vim creates swap files (.filename.swp) that persist even if the editor crashes, potentially leaking data:

ICS firewalls with"default accept" rules are typically seen in industrial network protection:

In the 5 step cycle of creating/maintaining firewall rules, step 3 is:

Which of the following would not belong in Layer Zero of the Purdue Model?

When managing firewall rules, you should do all of the following except:

"$nmap -A <ip>" should be used when scanning production systems and/or when scanning sensitive/critical infrastructure

A Stateful Firewall is recommended for use when VPN(s) and Remote Access are in place:

All of the following are advantages of Packet Filtering, except:

DNP3, unlike Modbus, supports advanced functions:

Use ____for seeing recent activity in log files, especially with ____-f to follow files in real-time.

Firewall rules are usually processed from bottom to top:

All of the following are associated with "Next Generation Firewalls" except:

The "-__" option provides permission details, ownership, size and modification times

Octal permission calculation combines the binary values for read, write and execute permissions. Read permission is:

Which of the following would not be classified as a "Virtual Asset?"

Cron timing expressions follow a precise five-field format:

in Nmap, "-sV":

The /bin directory contains essential command binaries

When you write <(command), the shell:

Use ______ when you need to see entire file contents that will fit comfortably on your screen

All of the following are examples of Network Segmentation best practices except:

The OPC ______ protocol uses:

Whitelisting in OT/CI is used to define exactly which commands are allowed and block everything else:

In NMAP, "--max-os-tries<num-tries>" means:

Ethernet/IP uses CIP (Common Industrial Protocol):

The _________ protocol uses an Orchestrator/Node architecture (I'm PC Bruh)

All of the following describe the a Data Diode except:

The sudoers file (/etc/sudoers) controls who can run what commands.

Typically, a Historian server would be placed in Layer 3 of the Purdue model:

Network Segmentation is an important element of Access Controls:

____________ (policy) is recommended for OT environments where network traffic patterns are predictable:

Automatic failover capabilities are a core component of maintaining a "High Availability Firewall"

The four steps of the Asset Lifecycle are: Planning, Procurement/Installation, ________ and Disposal/Replacement

One of the pros of Active Discovery is that it might disrupt sensitive systems

"_______ are specialists that understand web application threats, and work alongside network firewalls"

Which of the following is not an Shadow IT Device?

All of the following are examples of methods to baseline normal network behavior except:

Which of the following commands would you use to enumerate the process tree during a security audit?

"$ nmap –s <ip>" is used to perform basic host discovery:

Enterprise-wide Management and Internet Connectivity is usually associated with Purdue Layer _____?

The semicolon operator runs commands in sequence regardless of success or failure: