Attack Methodologies in ICS ICSSCADA Practice Questions (Page 8)

Questions 36–37

1. 36expert · hard

   A post-incident review of a ransomware attack on a manufacturing plant reveals that the initial entry was through a phishing email, but the ransomware only encrypted files on IT systems. The OT network was not affected because a unidirectional gateway was deployed. Which attack lifecycle phase was most effectively mitigated by the gateway?

   • AActions on objectives
   • BExploitation
   • CDelivery
   • DLateral movement
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A water treatment facility uses a legacy serial-based fieldbus to connect PLCs to a remote HMI. An engineer notices that the HMI occasionally displays valve positions that do not match the actual valve state, and the discrepancy resolves when the fieldbus cable is replaced. Which attack methodology is most directly indicated by these symptoms?

   • APhysical-layer signal degradation or interference
   • BDenial-of-service (DoS) attack on the HMI
   • CMan-in-the-middle (MITM) attack on the fieldbus
   • DReplay attack on the fieldbus protocol
   Reveal Solution Discussion Select an answer first