GICSP: Global Industrial Cyber Security Professional CertificationDemo

Question

What is a recommended practice for securing historians and databases that feed data back into control processes?

A Audit both successful and failed login attempts to databases
B Facilitate auditing by placing historians and databases in the same DMZ
C Use a dedicated domain admin user account to manage databases
D Use reliable network protocols like HTTP for remote management

Explanation

Audit records for both successful and failed login attempts provide accountability and help detect, investigate, and respond to unauthorized database access. Security logging guidance identifies failed logons and access events as relevant event types for auditing, while administrative access should follow least privilege and remote management should use protected protocols.

Learn more

NIST SP 800-171 Rev. 3 — Audit and Accountability

GICSP: Global Industrial Cyber Security Professional CertificationDemo

AstroTutor

Notes

Readiness

QuestionQ24

Community Discussion