In regard to your 2nd question, there are a few ways I'm aware of: 1. USB devices. If you need to move software from outside the air gap to inside, it's pretty

In regard to your 2nd question, there are a few ways I'm aware of: 1. USB devices. If you need to move software from outside the air gap to inside, it's pretty easy to imagine somebody copying malicious software unintentionally through that. You might think that typical AV could detect it, but that could either be worked around, disabled by the operators of those systems, or simply not up-to-date because they're in the air gap. 2. Sometimes, air-gapped systems still have some kind of tunnel that allows an exceptional connection between a system outside the air gap. If you knew how to access that tunnel, you could effectively compromise the air gapped network. I'm sure there are more ways too. But those are a few I know off-hand.