Table Top Exercise Conclude

Question 1

What is the most critical reason for isolating IT from OT during an active attack?

Accepted Answer

C) Prevent lateral movement and spread

Question 2

CSIRT Leader is the responsible to activate the CSIRT plan during an incident

Accepted Answer

True

Question 3

What risk can a misconfigured firewall rule introduce into an OT environment?

Accepted Answer

B) Unauthorized access between zones

Question 4

Was the escalation path and communication process clear throughout the scenario?

Accepted Answer

True, False

Question 5

A cyberattack is impossible on an OT environment that is completely isolated from IT and has no internet connection.

Accepted Answer

False

Question 6

Which one of the following is part of CSIRT team role during a cybersecurity incident?

Accepted Answer

C) Lead investigation, containment, and communication

Question 7

Do you think the current backup and recovery plan is sufficient in case of OT system compromise?

Accepted Answer

False, True

Question 8

How prepared do you feel your team is to handle a real-world OT-targeted cyberattack?

Accepted Answer

C) Slightly prepared, D) Not at all prepared, B) Moderately prepared, A) Extremely prepared

Question 9

The first step to report an incident is:

Accepted Answer

Identify the incident

Question 10

What is the main goal of a cybersecurity tabletop exercise?

Accepted Answer

A) To practice how teams respond to security incidents and raise awareness

Question 11

Is additional training or awareness is needed for better response in the future?

Accepted Answer

No, Yes

Questions 11