A security analyst is investigating a suspected DNS poisoning attack on the corporate network. The analyst notices that some workstations resolve 'historian.corp.local' to an incorrect IP address. Which mitigation should the analyst implement to prevent recurrence?

Change the DNS server to a public resolver like 8.8.8.8.

Block all DNS traffic on the firewall.

Configure DNS Security Extensions (DNSSEC) to validate DNS responses.

Disable DNS caching on all workstations.

A water treatment facility has a flat Layer 2 network where all PLCs, HMIs, and the corporate IT segment share the same broadcast domain. An engineer needs to segment the OT network from the corporate network while preserving the existing IP addressing scheme and without purchasing new hardware. Which action best meets these constraints?

Replace the core switch with a router and create separate subnets for each department.

Configure VLANs on the existing managed switches and assign OT devices to a separate VLAN ID.

Install a firewall between the OT and IT switches without changing the network topology.

Disable ARP on the OT switch ports to prevent IT devices from discovering OT devices.

EC-CouncilICS/SCADA Cybersecurity

Domain 2Objective 5

Components of TCP/IP Networks ICSSCADA Practice Questions (Page 5)

Part of the TCP/IP and ICS/SCADA Protocols domain, which makes up ~13% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–10 in this domain), expect 1–2 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

8concepts

Questions 21–25

21expert · hard
A security analyst is investigating a suspected DNS poisoning attack on the corporate network. The analyst notices that some workstations resolve 'historian.corp.local' to an incorrect IP address. Which mitigation should the analyst implement to prevent recurrence?
Select an answer first
22application · medium
A water treatment facility has a flat Layer 2 network where all PLCs, HMIs, and the corporate IT segment share the same broadcast domain. An engineer needs to segment the OT network from the corporate network while preserving the existing IP addressing scheme and without purchasing new hardware. Which action best meets these constraints?
Select an answer first
23foundation · easy
Which type of DNS record is used to map a domain name to an IPv4 address?
Select an answer first
24expert · hard
A SCADA engineer is designing a communication link between two control centers. The link must support both real-time process data (small, frequent, loss-tolerant) and configuration file transfers (large, infrequent, must be reliable). The engineer must choose a single transport protocol for both applications. Which protocol should the engineer choose?
Select an answer first
25foundation · easy
Which service uses TCP port 22 by default?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ICSSCADA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ICSSCADA” is a trademark of its owner, used for identification only.

Components of TCP/IP Networks ICSSCADA Practice Questions (Page 5)

Questions 21–25

A security analyst is investigating a suspected DNS poisoning attack on the corporate network. The analyst notices that some workstations resolve 'historian.corp.local' to an incorrect IP address. Which mitigation should the analyst implement to prevent recurrence?

Which type of DNS record is used to map a domain name to an IPv4 address?

Which service uses TCP port 22 by default?

Keep studying — TCP/IP and ICS/SCADA Protocols