Mobile, IoT, and OT Attacks ECSS Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A security analyst is investigating a cyber incident at a food processing plant. The plant's OT network was breached, and the attacker manipulated the temperature settings of pasteurization equipment, causing product spoilage. The initial access vector is believed to be a phishing email sent to an engineer who used a laptop that could connect to the OT network. Which combination of factors most likely enabled this attack?

   • AThe absence of antivirus on the OT network
   • BThe use of unencrypted Modbus TCP between the PLCs and the SCADA server
   • CLack of network segmentation and the use of a shared laptop for both IT and OT access
   • DThe use of default credentials on the pasteurization equipment
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   A user installs an app from an unofficial app store, and the app requests permissions to read contacts and send SMS. Which mobile attack vector is this an example of?

   • AMan-in-the-middle attack
   • BMalicious app
   • CSMS phishing
   • DDevice vulnerability exploitation
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A security analyst is reviewing the app store distribution for a new corporate productivity app. The app will handle sensitive HR data. The analyst wants to minimize the risk of malicious tampering and unauthorized distribution. Which distribution approach provides the strongest control over which devices can install the app?

   • AEnterprise distribution through Apple's Developer Enterprise Program and Android's private app publishing
   • BPublic release on the Apple App Store and Google Play
   • CTestFlight for iOS and internal track on Google Play
   • DAd-hoc distribution using Apple's ad-hoc provisioning and Android APK sideloading
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A security consultant is hired to conduct a penetration test on a manufacturing plant's OT environment. The plant uses legacy PLCs that are critical to production. The consultant wants to test the resilience of the PLCs to malformed packets. What is the most appropriate way to proceed?

   • ATest the malformed packets on a duplicate PLC in a lab environment that mirrors the production setup
   • BSend malformed packets directly to the production PLCs to observe their behavior
   • CSkip the malformed packet test and only review the PLC's configuration
   • DRun the test during a scheduled maintenance window with the plant's permission
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A security analyst is investigating a cyber incident at a natural gas pipeline company. The attack started with a phishing email to an employee, then moved to the corporate network, and finally reached the OT network that controls the pipeline. The analyst finds that the OT network had no firewall between it and the IT network. What is the most likely reason the attacker could move from IT to OT?

   • AThe phishing email contained a malicious attachment that directly compromised the OT network.
   • BThe lack of network segmentation between the IT and OT networks allowed lateral movement.
   • CThe OT network was connected to the internet without any security controls.
   • DThe OT network uses the same credentials as the IT network, allowing pass-the-hash attacks.
   Reveal Solution Discussion Select an answer first