ICS-SCADA Exam Dumps : ICS/SCADA Cyber Security Exam

IPsec uses two main protocols to secure network communications: Authentication Header (AH) and Encapsulating Security Payload (ESP).

Both AH and ESP use a Security Parameters Index (SPI), which is a critical component of their headers. The SPI is a unique identifier that enables the receiver to select the correct security association for processing incoming packets.

AH provides authentication and integrity, while ESP provides confidentiality, in addition to authentication and integrity. Both protocols use the SPI to manage these functions securely.

References

"IPsec Security Architecture," RFC 4302 (AH) and RFC 4303 (ESP).

"IPsec Explained," by Juniper Networks.

A data diode is known as a prebuilt directional gateway that is unidirectional, designed specifically to allow data to travel in only one direction, ensuring secure one-way communication. This feature makes data diodes ideal for environments where it iscritical to prevent any possibility of data leakage or unauthorized access from an external network back to a secure network. Data diodes are commonly used in military and industrial applications, including ICS/SCADA systems, to protect sensitive information.References:

U.S. Department of Energy, "Cybersecurity for SCADA Systems".

Ingress filtering is a method used in network security to ensure that incoming packets are allowed or blocked based on a set of security rules.

This type of filtering is often implemented at the boundaries of networks to prevent unwanted or harmful traffic from entering a more secure internal network.

The term "ingress" refers to traffic that is entering a network boundary, whereas "egress" refers to traffic exiting a network.

References

Cisco Networking Academy Program: Network Security.

"Understanding Ingress and Egress Filtering," Network Security Guidelines, TechNet.