Courseiva
Risk ManagementeasyMultiple ChoiceObjective-mapped

ISC Risk Management Practice Question

During a risk assessment of an industrial control system (ICS), the engineer identifies that an administrative workstation shares the same VLAN as the PLC network. Which remediation action is most effective from a risk management perspective?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Implement VLAN segmentation to isolate the workstation from the PLC network.

Network segmentation, particularly by isolating critical control devices from general-purpose administrative workstations, is a foundational risk mitigation strategy in ICS security.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Require MFA for workstation access.

    Why it's wrong here

    MFA protects against unauthorized users, not against a compromised workstation already on the network.

  • Implement VLAN segmentation to isolate the workstation from the PLC network.

    Why this is correct

    VLAN segmentation creates a logical boundary that prevents direct access and lateral movement.

  • Install an antivirus on the workstation.

    Why it's wrong here

    Antivirus is a necessary defense-in-depth measure, but it does not mitigate the architectural risk of flat networking.

  • Disable all unused ports on the PLC network switch.

    Why it's wrong here

    This is a good hardening practice, but it does not address the VLAN architecture issue.

Visual reference

Switch VLAN 10 Sales (192.168.10.0/24) PC-A PC-B VLAN 20 HR (192.168.20.0/24) PC-C PC-D Router VLANs isolate traffic — inter-VLAN routing requires a Layer 3 device

About these practice questions

One of 209 original ISC practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed August 2026 · checked against the official (ISC)² exam blueprint

This ISC practice question is part of Courseiva's free (ISC)² certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ISC exam.