Network segmentation (IT/OT separation) in SCADA systems - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is network segmentation in the context of IT/OT separation?

Network segmentation is the practice of dividing a computer network into smaller parts to improve security and performance. In IT/OT separation, it means keeping the office IT systems and the operational technology (like SCADA systems) on separate network segments to reduce risk.

beginner

Why is IT/OT separation important in industrial environments?

IT/OT separation helps protect critical operational systems from cyber attacks that might come through IT networks. It limits access and reduces the chance that a problem in IT will affect the OT systems controlling physical processes.

intermediate

Name a common method used to enforce network segmentation between IT and OT networks.

A common method is using firewalls or VLANs (Virtual Local Area Networks) to control and limit traffic between IT and OT segments.

intermediate

What is a DMZ in the context of IT/OT network segmentation?

A DMZ (Demilitarized Zone) is a separate network zone placed between IT and OT networks. It acts as a buffer area where data can be exchanged safely without exposing OT systems directly to IT networks.

intermediate

How does network segmentation improve incident response in IT/OT environments?

By isolating OT systems from IT networks, segmentation limits the spread of attacks or faults. This containment helps teams respond faster and reduces damage to critical operational systems.

What is the main goal of network segmentation between IT and OT?

A To increase internet speed for OT devices

B To combine IT and OT networks for easier management

C To improve security by isolating operational systems from IT networks

D To allow unrestricted access between IT and OT

Network segmentation aims to isolate OT systems from IT networks to reduce security risks.

Which device is commonly used to control traffic between IT and OT network segments?

A Firewall

B Printer

C Switch without VLANs

D Monitor

Firewalls regulate and filter traffic between network segments to enforce security policies.

What does VLAN stand for in network segmentation?

A Variable LAN Access Node

B Virtual Local Area Network

C Verified Local Access Network

D Virtual Link Access Network

VLAN means Virtual Local Area Network, a way to create separate network segments logically.

What is the purpose of a DMZ in IT/OT separation?

A To act as a buffer zone for safe data exchange

B To connect IT and OT networks directly

C To replace firewalls

D To increase network speed

A DMZ provides a controlled area where IT and OT systems can exchange data without direct exposure.

How does network segmentation help during a cyber attack?

A It allows attackers to access all systems easily

B It merges IT and OT networks

C It disables all network devices

D It limits the attack to one segment, preventing spread

Segmentation contains attacks within one network segment, reducing overall damage.

Explain in your own words why separating IT and OT networks is important for industrial control systems.

Think about how a problem in office computers could affect machines if networks were not separated.

Describe how firewalls and VLANs help enforce network segmentation between IT and OT.

Consider how these tools limit who can talk to whom on the network.