OT and SCADA Penetration Testing CPENT Practice Questions (Page 11)

Questions 51–51

1. 51expert · medium

   A penetration tester is assessing a pipeline control system that uses DNP3 over TCP/IP. The tester needs to enumerate the DNP3 points (binary inputs, analog inputs, counters) on a remote RTU. The safety team has prohibited any write operations and any operation that could cause a restart. Which technique is the safest and most effective?

   • AUse a DNP3 delay measurement function (0x13) to test communication
   • BUse a DNP3 cold restart function (0x0D) to see if the RTU reboots
   • CUse a DNP3 write function (0x02) to set a point and observe the response
   • DUse a DNP3 read function (0x01) to read all point data from the RTU
   Reveal Solution Discussion Select an answer first