While planning segmentation for an ICS environment, a security engineer determines IT resources will need access to devices within the ICS environment without compromising security. To provide the MOST secure access model in this scenario, the jumpbox should be __________.
A) placed in an isolated network segment, authenticated on the IT side, and forwarded into the ICS network.
B) placed on the ICS network with a static firewall rule that allows IT network resources to authenticate.
C) bridged between the IT and operational technology networks to allow authenticated access.
D) placed on the IT side of the network, authenticated, and tunneled into the ICS environment.

Question

Quizplus · Accepted Answer

Placing the jumpbox in an isolated network segment, authenticated on the IT side, and forwarded into the ICS network provides a secure access model by minimizing direct exposure of the ICS network to IT resources, while still allowing necessary access.

While Planning Segmentation for an ICS Environment, a Security Engineer