Hacking Methodology and the Hacking Process ICSSCADA Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following is a common vulnerability that attackers exploit in ICS/SCADA systems?

   • ARegular firmware updates that patch known vulnerabilities
   • BExcessive use of encryption on OT protocols
   • CStrong password policies on engineering workstations
   • DDefault or hardcoded credentials on PLCs and HMIs
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   In the systematic hacking methodology applied to ICS/SCADA environments, which phase directly follows the reconnaissance phase?

   • AExploitation
   • BMaintaining access
   • CCovering tracks
   • DScanning
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   During an authorized assessment of a power utility, you are asked to identify all PLCs on a specific OT subnet. The client insists that you minimize the risk of disrupting the live process. Which scanning technique is most appropriate?

   • AUse ARP scans to discover active hosts, then send targeted Modbus/TCP queries to port 502 on each discovered IP.
   • BPerform a full TCP connect scan on all 65,535 ports of every IP in the subnet.
   • CRun a UDP scan of all ports to catch proprietary ICS protocols.
   • DLaunch a vulnerability scanner with default credentials against every discovered device.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the primary purpose of covering tracks in an ICS/SCADA attack?

   • ATo identify vulnerabilities in the target system
   • BTo establish a persistent backdoor for future access
   • CTo gain initial access to the target system
   • DTo avoid detection by operators and security monitoring systems
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which technique is considered passive reconnaissance when gathering information about an ICS/SCADA target?

   • ABrowsing public job postings that mention specific PLC models used at the facility
   • BSending ICMP echo requests to the target's IP range
   • CUsing a vulnerability scanner to identify missing patches on a PLC
   • DPerforming a port scan on the target's OT network
   Reveal Solution Discussion Select an answer first