Challenges of Vulnerability Assessment ICSSCADA Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A natural gas pipeline operator is subject to TSA security directives that require regular vulnerability assessments. The operator has a legacy SCADA system that cannot be patched without a full shutdown. What is the most appropriate way to satisfy the directive?

   • AConduct the assessment using passive techniques and document the patching constraint.
   • BImmediately shut down the system to apply the patch and meet the directive.
   • CSkip the assessment because the system is legacy and cannot be patched.
   • DAsk the regulator for an exemption from the directive.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Why does incomplete asset inventory hinder comprehensive vulnerability discovery in ICS/SCADA environments?

   • AIncomplete inventory causes scanners to generate more false positives
   • BInventory is only needed for compliance reporting, not for vulnerability discovery
   • CIncomplete inventory slows down the network, making scans time out
   • DUnlisted devices may be missed by scans, leaving their vulnerabilities unknown and unaddressed
   Reveal Solution Discussion Select an answer first
4. 33expert · hard

   A security team is assessing a legacy SCADA system that uses a proprietary protocol. The team has a limited budget and must choose between purchasing a specialized ICS scanner or hiring a consultant with expertise in the protocol. What is the most important factor in this decision?

   • AThe specialized scanner may not support the proprietary protocol, making it ineffective.
   • BThe consultant will be more expensive than the scanner.
   • CThe consultant may not be available at the desired time.
   • DThe scanner will be faster than the consultant.
   Reveal Solution Discussion Select an answer first
5. 34expert · hard

   A security team is planning a vulnerability assessment for a nuclear power plant's control system. The system uses a mix of legacy and modern devices, some of which are safety-critical. The team has a budget for only one assessment method. What is the most appropriate method to minimize risk while still gathering useful data?

   • AUsing a traditional IT scanner with a custom plugin for each protocol.
   • BActive scanning with a specialized ICS scanner that supports all protocols.
   • CActive scanning only during a full plant shutdown.
   • DPassive network monitoring combined with manual asset inventory verification.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A hospital's building management system (BMS) controls HVAC and critical environmental conditions for operating rooms. A vulnerability scan is planned. What is the most critical factor to consider?

   • AThe scan should use the most aggressive settings to find all vulnerabilities quickly.
   • BThe scan must be completed within one hour to meet compliance deadlines.
   • CThe scan should be run from the IT network to avoid any impact on the BMS.
   • DThe scan must not disrupt the BMS, as it could affect patient safety.
   Reveal Solution Discussion Select an answer first