A plant manager wants to improve the security of a legacy OT system that runs on Windows 7 and uses unencrypted Modbus TCP. The system is critical and cannot be taken offline for upgrades. Which action provides the most immediate risk reduction without disrupting operations?

Implement network segmentation and firewall rules to restrict access to the legacy system

Disconnect the legacy system from the network entirely

Replace the Windows 7 machines with new hardware running a supported OS

Upgrade the Modbus protocol to Modbus TCP with TLS

An OT security team is planning to implement security controls in a power plant. The plant uses legacy PLCs that cannot be patched. Which control is most appropriate to mitigate the risk of network-based attacks?

Disable all network connectivity to the PLCs and rely on manual control.

Replace all legacy PLCs with modern ones that support encryption.

Implement network segmentation to isolate the OT network from the IT network and restrict traffic to only necessary protocols.

Apply virtual patches via an intrusion prevention system (IPS) in front of the PLCs.

A manufacturing plant uses a SCADA system to control a production line. The plant's OT network is isolated from the corporate IT network. The security team wants to conduct a penetration test to assess the OT environment. What is the most critical consideration before starting the test?

Use the same tools and techniques as in IT penetration testing.

Obtain written authorization from the plant manager.

Ensure that the test does not disrupt production, as availability is the top priority in OT environments.

Ensure the test is performed during off-hours to minimize disruption.

A security architect is designing a network segmentation plan for a natural gas pipeline company. The OT network includes a SCADA server, HMIs, PLCs, and remote terminal units (RTUs). The architect wants to ensure that a compromise of the corporate IT network does not directly reach the PLCs. Which segmentation strategy is most effective?

Connect the PLCs directly to the corporate network for easier remote monitoring

Place the SCADA server and HMIs in the IT network and the PLCs in the OT network

Use a firewall to allow only specific protocols from the IT network to the OT network, and place a DMZ between them

Use a single flat network for both IT and OT to simplify management

A security consultant is evaluating a fleet of smart meters that communicate over a proprietary RF protocol. The meters are deployed in the field and cannot be physically accessed. The consultant wants to assess the security of the communication protocol. Which approach is the most practical?

Intercept the traffic at the head-end server

Use a software-defined radio (SDR) to capture and analyze the RF signals

Disassemble a meter to access the UART debug port

Send malformed packets to the meters to test for crashes

EC-CouncilCertified Security Specialist

Domain 4Objective 4

Mobile, IoT, and OT Attacks ECSS Practice Questions (Page 5)

Part of the Ethical Hacking Advanced Attacks and Penetration Testing domain, which makes up ~17% of our current practice bank.

51questions here

11free pages

10concepts

Questions 21–25

21application · medium
A plant manager wants to improve the security of a legacy OT system that runs on Windows 7 and uses unencrypted Modbus TCP. The system is critical and cannot be taken offline for upgrades. Which action provides the most immediate risk reduction without disrupting operations?
Select an answer first
22application · medium
An OT security team is planning to implement security controls in a power plant. The plant uses legacy PLCs that cannot be patched. Which control is most appropriate to mitigate the risk of network-based attacks?
Select an answer first
23application · medium
A manufacturing plant uses a SCADA system to control a production line. The plant's OT network is isolated from the corporate IT network. The security team wants to conduct a penetration test to assess the OT environment. What is the most critical consideration before starting the test?
Select an answer first
24application · medium
A security architect is designing a network segmentation plan for a natural gas pipeline company. The OT network includes a SCADA server, HMIs, PLCs, and remote terminal units (RTUs). The architect wants to ensure that a compromise of the corporate IT network does not directly reach the PLCs. Which segmentation strategy is most effective?
Select an answer first
25expert · hard
A security consultant is evaluating a fleet of smart meters that communicate over a proprietary RF protocol. The meters are deployed in the field and cannot be physically accessed. The consultant wants to assess the security of the communication protocol. Which approach is the most practical?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECSS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECSS” is a trademark of its owner, used for identification only.