A manufacturing company is planning to connect its OT network to a cloud-based analytics platform for predictive maintenance. The OT network contains legacy PLCs that cannot be patched. The company must ensure that the cloud platform can receive data but cannot send commands to the PLCs. Which architecture best meets this requirement?

Use a unidirectional gateway that only allows OT-to-cloud data flow

Install a cloud-based HMI that directly connects to the PLCs

Use a VPN tunnel between OT and cloud

Place a firewall between OT and cloud with rules allowing only specific ports

A manufacturing plant has a flat network where the PLCs, HMIs, and business servers share the same VLAN. A malware infection on an office PC is able to reach the PLC programming port directly. Which attack surface element is the primary enabler of this compromise?

Lack of network segmentation between IT and OT

Missing physical security at the plant

A regional power grid operator discovers that an attacker gained access through a spear-phishing email, then spent six months mapping the network and finally triggered a breaker to open during a storm. The attacker used custom malware and had detailed knowledge of the grid's control protocols. Which threat actor profile best matches this attack?

Hacktivist group protesting energy policies

Disgruntled former employee with insider knowledge

Nation-state actor with advanced capabilities and long-term objectives

Cybercriminal gang seeking financial ransom

EC-CouncilICS/SCADA Cybersecurity

Domain 3Objective 5

How ICS/SCADA Are Targeted ICSSCADA Practice Questions (Page 1)

Part of the Introduction to Hacking ICS/SCADA domain, which makes up ~14% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–11 in this domain), expect 1–2 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

6concepts

Questions 1–5

1foundation · easy
Which threat actor is typically motivated by financial gain and may use ransomware to target ICS/SCADA systems?
Select an answer first
2foundation · easy
Which real-world attack on an ICS/SCADA system is known for causing physical damage to industrial equipment?
Select an answer first
3expert · hard
A manufacturing company is planning to connect its OT network to a cloud-based analytics platform for predictive maintenance. The OT network contains legacy PLCs that cannot be patched. The company must ensure that the cloud platform can receive data but cannot send commands to the PLCs. Which architecture best meets this requirement?
Select an answer first
4application · medium
A manufacturing plant has a flat network where the PLCs, HMIs, and business servers share the same VLAN. A malware infection on an office PC is able to reach the PLC programming port directly. Which attack surface element is the primary enabler of this compromise?
Select an answer first
5application · medium
A regional power grid operator discovers that an attacker gained access through a spear-phishing email, then spent six months mapping the network and finally triggered a breaker to open during a storm. The attacker used custom malware and had detailed knowledge of the grid's control protocols. Which threat actor profile best matches this attack?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ICSSCADA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ICSSCADA” is a trademark of its owner, used for identification only.

How ICS/SCADA Are Targeted ICSSCADA Practice Questions (Page 1)

Questions 1–5

Which threat actor is typically motivated by financial gain and may use ransomware to target ICS/SCADA systems?

Which real-world attack on an ICS/SCADA system is known for causing physical damage to industrial equipment?

A manufacturing plant has a flat network where the PLCs, HMIs, and business servers share the same VLAN. A malware infection on an office PC is able to reach the PLC programming port directly. Which attack surface element is the primary enabler of this compromise?

Keep studying — Introduction to Hacking ICS/SCADA