Free Practice Questions for GIAC GICSP Exam

Integrity in cybersecurity ensures that data and systems are not altered or tampered with in an unauthorized manner. To protect integrity, controls must verify that data originates from a trusted source and has not been changed.

Digital signatures (D) provide cryptographic proof of data origin and integrity by enabling recipients to verify that the data has not been altered since it was signed.

Firewall egress filtering (A) limits outbound traffic but primarily protects confidentiality and availability, not directly integrity.

Logging IDS alerts (B) supports detection and auditing but is reactive rather than preventive.

Centralized LDAP authentication (C) manages user authentication and access control, mainly protecting confidentiality and accountability.

GICSP highlights digital signatures as a core control to maintain data integrity, especially for firmware, configuration files, and critical commands within ICS.

Comprehensive and Detailed Explanation From Exact Extract:

In Purdue Level 3, which typically houses operations management systems and network devices, best practices for retrofitting security devices include placing those devices on their own subnet (B). This segmentation:

Limits broadcast domains and reduces unnecessary traffic

Enables easier management of security policies specific to cybersecurity devices

Provides isolation that helps protect security devices from general network traffic and potential attacks

Adding a firewall (A) is useful but does not replace subnet segregation. Moving devices to a DMZ (C) is typically reserved for systems that bridge between enterprise and ICS networks (often at Purdue Level 3 to Level 4 boundaries), not internal device placement within Level 3.

This approach is emphasized in GICSP’s ICS Security Architecture & Network Segmentation domain as a fundamental network design principle.