EC-COUNCILEC-Council ICS/SCADA Cybersecurity
The EC-Council ICS/SCADA Cybersecurity certification validates your ability to defend industrial control systems and SCADA networks from modern cyber threats. Designed for IT and OT professionals, this hands-on program teaches you to think like an attacker, analyze risk across IT and corporate networks, and respond effectively to breaches. Earn it to prove you can protect the critical infrastructure that keeps communities and businesses safe.
1865 practice questions · Updated 2026-07-30
8Domains
45Objectives
291Concepts
1865Questions
ICSSCADA Curriculum
Every domain, objective, and concept the ICSSCADA exam measures.
- IT Security Model Overview
- CIA Triad
- Defense in Depth
- Security Zones and Conduits
- IT/OT Convergence
- ICS/SCADA Security Model Overview
- Defense-in-Depth Strategy
- Security Zones and Conduits
- Purdue Model for ICS
- Security Controls Implementation
- Security Posture Definition
- Security Posture Components
- Assessing Security Posture
- Improving Security Posture
- ICS/SCADA Risk Management Fundamentals
- Risk Assessment Methodologies for ICS/SCADA
- Threat and Vulnerability Identification in ICS/SCADA
- Risk Analysis and Evaluation
- Risk Mitigation Strategies and Controls
- Risk Monitoring and Review
- Risk Communication and Documentation
- Risk Assessment Fundamentals
- Risk Identification
- Risk Analysis
- Risk Evaluation
- Types of Risk
- Risk Treatment Options
- Risk Documentation
- Security Policy Fundamentals
- Policy Development Process
- Policy Components
- Compliance and Enforcement
- TCP/IP Model Layers
- TCP/IP vs OSI Model
- IP Addressing Fundamentals
- TCP and UDP Protocols
- Ports and Sockets
- ARP and ICMP
- Routing Basics
- DNS and DHCP
- Network Address Translation (NAT)
- Common TCP/IP Applications
- RFC and STD Overview
- RFC Publication Process
- STD Numbering and Status
- Relevant RFCs for ICS/SCADA
- Applying RFCs to ICS/SCADA
- TCP/IP Model Layers
- Encapsulation and De-encapsulation
- TCP vs UDP
- IP Addressing and Subnetting
- Ports and Sockets
- Common TCP/IP Protocols
- TCP/IP in ICS/SCADA
- OSI Model Layers
- TCP/IP Model Layers
- Encapsulation and De-encapsulation
- Protocol Data Units (PDUs)
- Comparison of OSI and TCP/IP Models
- Role of Protocols in Layering
- TCP/IP Protocol Suite Overview
- IP Addressing and Subnetting
- TCP and UDP Fundamentals
- Routing and Switching Basics
- DNS and Name Resolution
- Network Services and Ports
- Network Devices and Topologies
- Network Security Fundamentals
- ICS/SCADA Protocol Overview
- Common ICS/SCADA Protocols
- Protocol Characteristics
- Protocol Vulnerabilities
- Protocol Analysis
- Hacking Methodology Overview
- ICS/SCADA Reconnaissance
- ICS/SCADA Scanning and Enumeration
- ICS/SCADA Exploitation
- Maintaining Access and Covering Tracks
- Hacking Process Phases
- Footprinting Definition
- Passive Information Gathering
- Active Information Gathering
- Open Source Intelligence (OSINT)
- Network Footprinting
- System Footprinting
- Organizational Footprinting
- Footprinting Tools
- Countermeasures
- Scanning ICS/SCADA Networks
- Enumeration of ICS/SCADA Protocols
- Banner Grabbing and Service Identification
- Vulnerability Scanning in ICS/SCADA
- Mapping ICS/SCADA Network Topology
- Documenting Scan Findings
- Vulnerability Identification in ICS/SCADA
- Exploitation Techniques for ICS/SCADA
- Impact Assessment of Exploitation
- Mitigation Strategies
- Attack Vectors
- Motivations
- Threat Actors
- Attack Surface
- Attack Lifecycle
- Case Studies
- ICS Attack Lifecycle
- ICS Attack Vectors
- ICS Attack Surfaces
- ICS Attack Methodologies
- ICS Attack Case Studies
- Identify inherent challenges in ICS/SCADA vulnerability assessment
- Recognize operational impact and safety risks
- Understand limited visibility and asset discovery issues
- Address patch management and remediation constraints
- Evaluate tool limitations and false positives
- Consider compliance and regulatory pressures
- Identify ICS/SCADA Vulnerabilities
- Analyze Vulnerability Impact
- Prioritize Vulnerabilities
- Apply Mitigation Strategies
- Advisory Notice Structure
- CVE Identification
- CVE Details Interpretation
- CVSS Scoring Basics
- Advisory-CVE Correlation
- Patch and Mitigation Guidance
- Vulnerability Life Cycle Stages
- Exploit Life Cycle Stages
- Vulnerability-Exploit Relationship
- Timeline of Vulnerability and Exploit
- Impact of Life Cycle on Security
- Vulnerability Scanner Fundamentals
- Scanner Deployment Considerations
- Scanner Configuration and Tuning
- Interpreting Scan Results
- Integration with Vulnerability Management
- CVSS Fundamentals
- CVSS Vector String Parsing
- CVSS Base Metrics
- CVSS Temporal and Environmental Metrics
- CVSS Scoring Calculation
- CVSS in Vulnerability Prioritization
- OVAL Fundamentals
- OVAL Definitions and Tests
- OVAL Interoperability
- Integrating CVSS and OVAL
- ISO 27001 Overview
- ISMS Requirements
- Risk Management Process
- Annex A Controls
- Certification Process
- Integration with ICS/SCADA
- NERC CIP Overview
- CIP Standards Structure
- Critical Cyber Assets
- Cyber Security Policies
- Personnel and Training
- Physical Security
- Systems Security Management
- Incident Reporting and Response
- Recovery Plans
- Compliance and Enforcement
- CFATS Overview
- CFATS Regulatory Authority
- CFATS Applicability
- CFATS Risk-Based Performance Standards
- CFATS Security Vulnerability Assessment
- CFATS Site Security Plan
- CFATS Compliance and Enforcement
- CFATS and Cybersecurity Integration
- ISA99 Overview
- ISA99 Parts and Their Roles
- Security Levels (SL)
- Zones and Conduits Model
- Risk Assessment and Mitigation
- System Security Requirements
- Implementation Guidance
- IEC 62443 Overview
- IEC 62443 Parts and Documents
- Security Levels (SL)
- Zones and Conduits
- Security Lifecycle
- Roles and Responsibilities
- IEC 62443 and Other Standards
- NIST SP 800-82 Overview
- ICS Architecture and Components
- ICS Security Program Development
- ICS Security Controls
- ICS Threats and Vulnerabilities
- ICS Security Architecture and Design
- ICS Security Implementation and Operations
- ICS Security Assessment and Auditing
- NIST SP 800-82 Relationship to Other Standards
- Physical Security Fundamentals
- Physical Threats to ICS
- Physical Security Controls
- Facility Design and Layout
- Access Control Mechanisms
- Environmental and Safety Controls
- Physical Security Policies and Procedures
- Monitoring and Surveillance
- Physical Security Incident Response
- Integration with Overall Security
- ISO/IEC 27001 overview
- ISO/IEC 27002 controls
- ISO/IEC 62443 series
- Mapping ISO 27001 to ICS/SCADA
- Roadmap development steps
- Policy documentation and governance
- Compliance and audit considerations
- ICS Protocol Vulnerabilities
- Protocol-Specific Security Controls
- Secure Deployment of ICS Protocols
- Monitoring and Anomaly Detection for ICS Protocols
- Encryption and Authentication in ICS Protocols
- Risk Mitigation Control Selection
- Control Categories and Types
- Defense-in-Depth Strategy
- Network Segmentation and Zoning
- Access Control Mechanisms
- Monitoring and Detection Controls
- Patch and Configuration Management
- Incident Response and Recovery Controls
- ICS Network Monitoring Fundamentals
- Monitoring Architecture and Components
- Data Collection Methods
- Protocol Analysis for ICS
- Anomaly Detection Techniques
- Intrusion Detection and Prevention in ICS
- Security Information and Event Management (SIEM) Integration
- Monitoring for Compliance and Auditing
- Incident Response and Monitoring
- Monitoring Performance and Optimization
- Identify Legacy Systems
- Assess Legacy System Risks
- Apply Compensating Controls
- Implement Network Segmentation
- Use Virtual Patching
- Monitor Legacy Systems
- Plan Legacy System Lifecycle
- Definition of Air Gap
- Advantages of Air Gapping
- Disadvantages of Air Gapping
- Bridging the Air Gap
- Security Implications of Bridging
- Real-World Scenarios
- Air Gap Definition
- Air Gap Purpose
- Air Gap Implementation
- Air Gap Challenges
- Air Gap Bypass Risks
- Air Gap Security Controls
- Data Diode Definition
- Hardware Implementation
- Unidirectional Flow
- Use Cases
- Security Benefits
- Limitations
- Deployment Considerations
- NGFW Fundamentals
- Application Identification and Control
- User and Group-Based Policy Enforcement
- Intrusion Prevention System (IPS) Integration
- SSL/TLS Decryption and Inspection
- NGFW Deployment Architectures
- NGFW in Air-Gapped Environments
- Policy Management and Optimization
- NGFW Logging, Monitoring, and Reporting
- NGFW Performance and High Availability
- IDS Capabilities
- IDS Limitations
- IDS vs IPS
- Deployment Considerations
- False Positives and Negatives
- Network-based IDS (NIDS)
- Host-based IDS (HIDS)
- Network Node IDS (NNIDS)
- Comparison of IDS Types
- Advantages of IDS
- Limitations of IDS
- Comparison of Advantages and Limitations
- Stealth IDS Overview
- Network TAPs and Port Mirroring
- Inline vs. Passive Deployment
- Traffic Obfuscation Techniques
- Avoiding Detection by Attackers
- Stealth Configuration Best Practices
- IDS/IPS Fundamentals
- Detection Methodologies
- ICS/SCADA-Specific Threats
- Deployment Strategies
- Alert Analysis and Response
Ready to practice?Test your knowledge with exam-style questions or take an intelligent quiz tailored to your level.
Percentages reflect share of the current practice bank, not official exam weightings — no structured per-skill weight is published for ICSSCADA, so none is invented.