Challenges of Vulnerability Assessment ICSSCADA Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A food processing plant uses a mix of Ethernet/IP and legacy serial devices. The security team plans to use a single vulnerability scanner for the entire OT network. What is the most important consideration?

   • AThe scanner must support both Ethernet/IP and the legacy serial protocol to avoid blind spots.
   • BThe scanner should be configured to only scan during off-hours to reduce impact.
   • CThe scanner should be run with default credentials to ensure access to all devices.
   • DThe scanner should be placed on the IT network to avoid impacting OT performance.
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   How does network segmentation in ICS/SCADA environments affect vulnerability discovery?

   • AIt eliminates the need for vulnerability scanning because segments are isolated
   • BIt can prevent scanners from reaching all segments, leaving some devices unassessed
   • CIt ensures that all devices are visible to a central scanner
   • DIt makes scanning easier because each segment is smaller
   Reveal Solution Discussion Select an answer first
4. 38expert · hard

   A chemical plant is subject to both OSHA process safety management (PSM) and the EU's NIS Directive. The plant's vulnerability assessment team wants to use active scanning, but the process safety team is concerned about disruption. What is the best way to reconcile these concerns?

   • AAsk the process safety team to approve all scans without modification.
   • BDevelop a joint assessment plan that includes a risk assessment, scheduling during safe periods, and using passive techniques where active scanning is too risky.
   • CPerform active scanning only on non-critical systems and skip critical ones to avoid disruption.
   • DUse only passive monitoring to satisfy both regulations, as it is the safest method.
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A vulnerability assessment at a refinery identifies a missing security patch on a DCS controller. The vendor requires a full system test before patching, which would take two weeks. Production cannot be stopped. What is the best course of action?

   • AApply the patch immediately without testing to reduce the vulnerability window.
   • BAsk the vendor to waive the testing requirement to speed up the patch.
   • CIgnore the vulnerability because the vendor's testing requirement is too burdensome.
   • DDocument the risk and implement compensating controls until the patch can be applied during a scheduled outage.
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   Why do legacy systems in ICS/SCADA environments pose a unique challenge during vulnerability assessment?

   • AThey are typically located in remote geographic areas that are hard to reach
   • BThey often run outdated operating systems that lack patches and are incompatible with modern scanning tools
   • CThey are always air-gapped from the corporate network, making scanning impossible
   • DThey use standard IT protocols that are too well-documented for effective scanning
   Reveal Solution Discussion Select an answer first