Challenges of Vulnerability Assessment ICSSCADA Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   How do regulatory requirements influence the approach to vulnerability assessment in ICS/SCADA environments?

   • AThey only apply to IT systems, not to ICS/SCADA
   • BThey prohibit the use of automated scanning tools in critical infrastructure
   • CThey require that all vulnerabilities be patched within 24 hours of discovery
   • DThey may mandate specific assessment frequencies, methodologies, or documentation that must be followed
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A hospital's building management system (BMS) controls HVAC and access control. The security team wants to run an active vulnerability scan on the BMS controllers. What is the most important factor to consider before scanning?

   • AThe scan will generate false positives because the BMS uses a proprietary protocol.
   • BThe scan will violate HIPAA because the BMS is connected to the hospital network.
   • CThe scan will require a maintenance window that the hospital cannot schedule.
   • DThe scan could disrupt the HVAC system, affecting patient comfort and safety.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which of the following is a primary safety risk associated with vulnerability assessment activities in an ICS/SCADA environment?

   • AScanning consumes all available network bandwidth, causing a denial of service
   • BScanning always causes the system to reboot, leading to loss of process control
   • CScanning exposes sensitive process data to the internet
   • DScanning may inadvertently trigger safety interlocks or cause a process to enter an unsafe state
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A security team is assessing a legacy system that is no longer supported by the vendor. The system has known vulnerabilities, but the vendor will not provide patches. The system is critical to the operation. What is the most appropriate strategy?

   • AReplace the system immediately with a modern equivalent, regardless of cost.
   • BImplement a defense-in-depth approach, including network segmentation, monitoring, and access controls, to mitigate the risk.
   • CAccept the risk and take no action because the vendor is no longer supporting the system.
   • DDisconnect the system from the network to eliminate the risk.
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A security analyst is tasked with creating a complete asset inventory for a large water utility. The network has multiple VLANs, and some devices are on serial links that are not connected to the IP network. The analyst has access to the switch configuration and the SCADA historian. What is the most effective way to identify all assets?

   • ACombine data from switch ARP tables, SCADA historian logs, and physical walk-downs of the facility.
   • BUse an active scanner to scan all IP subnets and rely on the results.
   • CUse passive monitoring on the core switch to capture all traffic.
   • DRequest the vendor's asset list for all devices sold to the utility.
   Reveal Solution Discussion Select an answer first