The 2015 Ukraine power grid attack is a case study that demonstrated which combination of attack methodologies?

Spear-phishing, remote access, and direct manipulation of SCADA systems

Denial-of-service attacks on the internet connection

Physical intrusion and USB drops

Replay attacks on DNP3 protocol

In the Maroochy Shire water breach, a disgruntled former employee used a laptop and radio equipment to issue false commands to sewage pumps, causing millions of liters of sewage to spill. Which attack vector and methodology are most directly demonstrated?

Human vector and direct command injection

Physical vector and replay attack

A manufacturing plant has a strict policy that no USB devices are allowed in the control room. However, an attacker is able to gain access to the control room by tailgating an employee. Once inside, the attacker uses a USB device to load malware onto the HMI. Which combination of attack vectors is being used?

Physical vector (USB) and network vector (tailgating)

Physical vector (tailgating) and human vector (social engineering)

Network vector (USB) and physical vector (tailgating)

Human vector (tailgating) and network vector (USB)

EC-CouncilICS/SCADA Cybersecurity

Domain 3Objective 6

Attack Methodologies in ICS ICSSCADA Practice Questions (Page 7)

Part of the Introduction to Hacking ICS/SCADA domain, which makes up ~14% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–11 in this domain), expect 1–2 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

5concepts

Questions 31–35

31foundation · easy
Which of the following is an attack surface specific to ICS/SCADA communication protocols?
Select an answer first
32application · medium
A water utility's SCADA network was breached. Investigators found that the attacker first used Shodan to identify internet-exposed HMIs, then sent spear-phishing emails to operators to obtain VPN credentials, and finally used those credentials to access the HMI and alter tank setpoints. Which ICS attack lifecycle phase does the use of Shodan represent?
Select an answer first
33foundation · easy
The 2015 Ukraine power grid attack is a case study that demonstrated which combination of attack methodologies?
Select an answer first
34expert · hard
In the Maroochy Shire water breach, a disgruntled former employee used a laptop and radio equipment to issue false commands to sewage pumps, causing millions of liters of sewage to spill. Which attack vector and methodology are most directly demonstrated?
Select an answer first
35expert · hard
A manufacturing plant has a strict policy that no USB devices are allowed in the control room. However, an attacker is able to gain access to the control room by tailgating an employee. Once inside, the attacker uses a USB device to load malware onto the HMI. Which combination of attack vectors is being used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ICSSCADA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ICSSCADA” is a trademark of its owner, used for identification only.

Attack Methodologies in ICS ICSSCADA Practice Questions (Page 7)

Questions 31–35

Which of the following is an attack surface specific to ICS/SCADA communication protocols?

The 2015 Ukraine power grid attack is a case study that demonstrated which combination of attack methodologies?

In the Maroochy Shire water breach, a disgruntled former employee used a laptop and radio equipment to issue false commands to sewage pumps, causing millions of liters of sewage to spill. Which attack vector and methodology are most directly demonstrated?

Keep studying — Introduction to Hacking ICS/SCADA