A manufacturing plant uses a SCADA system with legacy PLCs that communicate using Modbus TCP. The plant recently connected the SCADA network to the corporate network for reporting. A security consultant warns that the Modbus protocol lacks authentication and encryption. What is the most appropriate first step to reduce the risk of an attacker manipulating industrial processes?

Implement strong authentication on all PLCs

Monitor the SCADA network for unusual Modbus commands

Replace all Modbus TCP connections with a modern protocol that supports encryption

Deploy a firewall between the corporate and SCADA networks with strict allow-list rules

A water treatment facility relies on a legacy control system that has not been patched in years because the vendor no longer supports it. The system uses a proprietary protocol that is not encrypted. The facility manager wants to improve security without replacing the entire system. Which approach is most practical?

Upgrade the operating system on the control servers to a supported version

Disconnect the control system from all networks and use only manual operations

Replace the proprietary protocol with a modern encrypted protocol

Implement network segmentation and monitor the control network for anomalies

Which OT attack type is most directly associated with an attacker sending crafted Modbus commands to change the setpoint of a temperature controller in a chemical plant?

Direct manipulation of industrial processes

A natural gas pipeline operator uses an OT network with legacy protocols that are not encrypted. The operator wants to implement monitoring to detect anomalies. What is the primary challenge in deploying network monitoring in this environment?

Legacy protocols may not be fully understood by traditional IT monitoring tools.

The network is too fast for monitoring tools.

The OT network is not connected to any network, so monitoring is impossible.

Monitoring tools will automatically encrypt the legacy protocols.

A company deploys smart locks for office doors. The locks use a mobile app for access control, and the firmware can be updated over the internet. The security team wants to ensure that only authorized firmware can be installed on the locks. Which control is most directly relevant?

Segment the smart lock network from the corporate network

Monitor the locks for unusual behavior

Use a strong password for the mobile app

Implement secure boot with signed firmware images

EC-CouncilEthical Hacking Essentials

Domain 7Objective 5

IoT and OT Attacks and Countermeasures EHE Practice Questions (Page 7)

Part of the Wireless, Mobile, IoT, and OT Attacks domain, which makes up ~15% of our current practice bank.

54questions here

11free pages

8concepts

Questions 31–35

31application · medium
A manufacturing plant uses a SCADA system with legacy PLCs that communicate using Modbus TCP. The plant recently connected the SCADA network to the corporate network for reporting. A security consultant warns that the Modbus protocol lacks authentication and encryption. What is the most appropriate first step to reduce the risk of an attacker manipulating industrial processes?
Select an answer first
32application · medium
A water treatment facility relies on a legacy control system that has not been patched in years because the vendor no longer supports it. The system uses a proprietary protocol that is not encrypted. The facility manager wants to improve security without replacing the entire system. Which approach is most practical?
Select an answer first
33foundation · easy
Which OT attack type is most directly associated with an attacker sending crafted Modbus commands to change the setpoint of a temperature controller in a chemical plant?
Select an answer first
34application · medium
A natural gas pipeline operator uses an OT network with legacy protocols that are not encrypted. The operator wants to implement monitoring to detect anomalies. What is the primary challenge in deploying network monitoring in this environment?
Select an answer first
35application · medium
A company deploys smart locks for office doors. The locks use a mobile app for access control, and the firmware can be updated over the internet. The security team wants to ensure that only authorized firmware can be installed on the locks. Which control is most directly relevant?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to EHE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “EHE” is a trademark of its owner, used for identification only.

IoT and OT Attacks and Countermeasures EHE Practice Questions (Page 7)

Questions 31–35

Which OT attack type is most directly associated with an attacker sending crafted Modbus commands to change the setpoint of a temperature controller in a chemical plant?

A natural gas pipeline operator uses an OT network with legacy protocols that are not encrypted. The operator wants to implement monitoring to detect anomalies. What is the primary challenge in deploying network monitoring in this environment?

A company deploys smart locks for office doors. The locks use a mobile app for access control, and the firmware can be updated over the internet. The security team wants to ensure that only authorized firmware can be installed on the locks. Which control is most directly relevant?

Keep studying — Wireless, Mobile, IoT, and OT Attacks