Hacking Methodology and the Hacking Process ICSSCADA Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   In the hacking process, what is the main objective of the 'footprinting' step, which is part of the reconnaissance phase?

   • ATo actively scan the target network for open ports
   • BTo gather as much information as possible about the target without directly interacting with it
   • CTo exploit vulnerabilities in the target system
   • DTo maintain access to the target system
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which tool or protocol is commonly used during the scanning and enumeration phase to discover ICS/SCADA devices that speak Modbus?

   • AHydra with a dictionary attack on SSH
   • BMetasploit's auxiliary scanner for SMB shares
   • CWireshark with a capture filter for HTTP traffic
   • DNmap with the modbus-discover script
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A penetration tester is conducting a red-team exercise against a pharmaceutical manufacturer's ICS. The client has imposed two constraints: (1) no active scanning of the OT network during production hours, and (2) the tester must identify all IP addresses of PLCs in a specific plant. The tester has access to the corporate IT network but not the OT network. Which approach best satisfies both constraints?

   • AUse a vulnerability scanner to scan the OT network from the IT side.
   • BRun an active Nmap scan of the OT subnet during off-hours.
   • CUse passive network monitoring on the IT/OT gateway to capture traffic and identify PLC IPs.
   • DQuery the DHCP server logs on the IT network to find IP addresses of OT devices.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which statement best describes the purpose of the 'maintaining access' phase in the hacking methodology as applied to ICS/SCADA systems?

   • ATo perform initial footprinting of the target network
   • BTo identify open ports and services on ICS devices
   • CTo deliver the final payload to the target system
   • DTo establish persistent presence in the compromised system for continued access
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the correct sequence of phases in the hacking process as applied to ICS/SCADA systems?

   • AExploitation, Reconnaissance, Scanning, Maintaining Access, Covering Tracks
   • BScanning, Reconnaissance, Exploitation, Covering Tracks, Maintaining Access
   • CReconnaissance, Exploitation, Scanning, Maintaining Access, Covering Tracks
   • DReconnaissance, Scanning, Exploitation, Maintaining Access, Covering Tracks
   Reveal Solution Discussion Select an answer first