In the ICS attack lifecycle, which phase immediately follows the initial reconnaissance and target identification stage?

Command and control establishment

A power utility has a SCADA system with a legacy protocol that lacks authentication. An attacker on the same network can send forged commands to a remote terminal unit (RTU) to open a breaker. Which attack surface is being exploited?

The communication protocol's lack of authentication

EC-CouncilICS/SCADA Cybersecurity

Domain 3Objective 6

Attack Methodologies in ICS ICSSCADA Practice Questions (Page 3)

Part of the Introduction to Hacking ICS/SCADA domain, which makes up ~14% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–11 in this domain), expect 1–2 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

5concepts

Questions 11–15

11application · medium
A security engineer is monitoring the ICS network and notices a flood of malformed packets being sent to a PLC, causing it to reboot repeatedly. This is causing production downtime. Which attack methodology is being used?
Select an answer first
12foundation · easy
In the ICS attack lifecycle, which phase immediately follows the initial reconnaissance and target identification stage?
Select an answer first
13application · medium
A power utility has a SCADA system with a legacy protocol that lacks authentication. An attacker on the same network can send forged commands to a remote terminal unit (RTU) to open a breaker. Which attack surface is being exploited?
Select an answer first
14application · medium
In the Stuxnet attack, the malware modified the frequency of variable frequency drives (VFDs) on centrifuges while replaying normal operating data to the HMI. Which attack methodologies were combined?
Select an answer first
15foundation · easy
Which phase of the ICS attack lifecycle involves the attacker actively manipulating or disrupting the physical process controlled by the SCADA system?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ICSSCADA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ICSSCADA” is a trademark of its owner, used for identification only.

Attack Methodologies in ICS ICSSCADA Practice Questions (Page 3)

Questions 11–15

A security engineer is monitoring the ICS network and notices a flood of malformed packets being sent to a PLC, causing it to reboot repeatedly. This is causing production downtime. Which attack methodology is being used?

In the ICS attack lifecycle, which phase immediately follows the initial reconnaissance and target identification stage?

A power utility has a SCADA system with a legacy protocol that lacks authentication. An attacker on the same network can send forged commands to a remote terminal unit (RTU) to open a breaker. Which attack surface is being exploited?

In the Stuxnet attack, the malware modified the frequency of variable frequency drives (VFDs) on centrifuges while replaying normal operating data to the HMI. Which attack methodologies were combined?

Which phase of the ICS attack lifecycle involves the attacker actively manipulating or disrupting the physical process controlled by the SCADA system?

Keep studying — Introduction to Hacking ICS/SCADA