Challenges of Vulnerability Assessment ICSSCADA Practice Questions (Page 9)

Questions 41–44

1. 41foundation · easy

   What is a limitation of traditional vulnerability scanners when assessing ICS/SCADA networks?

   • AThey can only scan devices that are running Windows operating systems
   • BThey may not support the proprietary protocols used by many ICS/SCADA devices
   • CThey require a physical connection to every device
   • DThey are unable to generate reports for management
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   A security analyst is tasked with assessing a manufacturing facility's OT network. The asset inventory is outdated and incomplete. What is the most likely consequence of this?

   • AThe assessment will be faster because fewer devices are known.
   • BThe scanner will automatically discover all devices, so the inventory is not critical.
   • CThe analyst will be able to prioritize vulnerabilities more easily with fewer assets.
   • DSome devices will be missed, leaving their vulnerabilities unknown and unmitigated.
   Reveal Solution Discussion Select an answer first
4. 43application · medium

   A chemical plant's safety instrumented system (SIS) is scheduled for a vulnerability scan. The plant engineer warns that the SIS is highly sensitive to network traffic. What should the security team do first?

   • ARun the scan immediately to identify vulnerabilities before the next production cycle.
   • BDisable the SIS safety functions temporarily to prevent false alarms during the scan.
   • CRun the scan during a scheduled maintenance shutdown when the process is offline.
   • DIncrease the scan intensity to complete it faster and reduce the time window of exposure.
   Reveal Solution Discussion Select an answer first
5. 44application · medium

   A chemical plant uses a distributed control system (DCS) from a vendor that requires all patches to be tested on a replica system before deployment. The plant has a critical vulnerability in a controller that cannot be patched during normal operation. What is the most appropriate action for the security team?

   • ADisable the controller's network connection to mitigate the vulnerability without patching.
   • BAsk the vendor to provide a custom patch that can be applied without testing.
   • CSchedule a maintenance window and apply the patch after testing on the replica system.
   • DApply the patch immediately to the production controller to reduce risk.
   Reveal Solution Discussion Select an answer first