A security engineer is investigating an incident where an attacker used a MITM attack to alter data between the HMI and PLC, and also used a DoS attack to disrupt the communication between the PLC and a remote sensor. Which of the following best describes the combined impact of these attacks?

The MITM attack disrupted the network, while the DoS attack altered the process.

The MITM attack altered the process, while the DoS attack caused a loss of sensor data, leading to unsafe conditions.

The MITM attack caused a loss of sensor data, while the DoS attack altered the process.

The MITM attack and DoS attack both caused a loss of sensor data.

In a man-in-the-middle (MITM) attack against an ICS/SCADA system, what is the attacker's primary objective?

To flood the network with traffic to cause a denial of service

To intercept and alter communications between devices without detection

To physically damage a field device

To gain persistent remote access to the HMI

A chemical plant's security manager is conducting a risk assessment. The plant has a wireless network for handheld maintenance devices, a public-facing web portal for remote monitoring, and a USB port on the HMI for firmware updates. Which of the following is the most likely human vector that an attacker could exploit?

Exploiting a vulnerability in the wireless protocol

Social engineering an operator to plug a malicious USB drive into the HMI

Intercepting traffic on the public web portal

Performing a MITM attack on the wireless network

EC-CouncilICS/SCADA Cybersecurity

Domain 3Objective 6

Attack Methodologies in ICS ICSSCADA Practice Questions (Page 4)

Part of the Introduction to Hacking ICS/SCADA domain, which makes up ~14% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–11 in this domain), expect 1–2 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

5concepts

Questions 16–20

16expert · hard
A security engineer is investigating an incident where an attacker used a MITM attack to alter data between the HMI and PLC, and also used a DoS attack to disrupt the communication between the PLC and a remote sensor. Which of the following best describes the combined impact of these attacks?
Select an answer first
17foundation · easy
In a man-in-the-middle (MITM) attack against an ICS/SCADA system, what is the attacker's primary objective?
Select an answer first
18application · medium
A chemical plant's security manager is conducting a risk assessment. The plant has a wireless network for handheld maintenance devices, a public-facing web portal for remote monitoring, and a USB port on the HMI for firmware updates. Which of the following is the most likely human vector that an attacker could exploit?
Select an answer first
19application · medium
A threat actor positions a laptop between a field device and its controller, intercepting and modifying sensor readings before they reach the controller. This causes the controller to make incorrect decisions. Which attack methodology is being used?
Select an answer first
20foundation · easy
In a typical ICS/SCADA architecture, which of the following components is considered an attack surface?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ICSSCADA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ICSSCADA” is a trademark of its owner, used for identification only.

Attack Methodologies in ICS ICSSCADA Practice Questions (Page 4)

Questions 16–20

A security engineer is investigating an incident where an attacker used a MITM attack to alter data between the HMI and PLC, and also used a DoS attack to disrupt the communication between the PLC and a remote sensor. Which of the following best describes the combined impact of these attacks?

In a man-in-the-middle (MITM) attack against an ICS/SCADA system, what is the attacker's primary objective?

A threat actor positions a laptop between a field device and its controller, intercepting and modifying sensor readings before they reach the controller. This causes the controller to make incorrect decisions. Which attack methodology is being used?

In a typical ICS/SCADA architecture, which of the following components is considered an attack surface?

Keep studying — Introduction to Hacking ICS/SCADA