How ICS/SCADA Are Targeted ICSSCADA Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A group claims responsibility for a cyberattack that temporarily disabled a city's traffic control system. They posted a manifesto stating they wanted to protest the city's environmental policies. Which motivation best describes this attack?

   • AFinancial extortion through ransomware
   • BState-sponsored sabotage to weaken infrastructure
   • CHacktivism to promote a political or social cause
   • DIndustrial espionage to steal traffic data
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A security analyst is studying the 2015 Ukraine power grid attack to improve her organization's defenses. She notes that the attackers gained access through spear-phishing emails, used VPN credentials to enter the OT network, and then remotely operated the HMI to open breakers. Which defense would have been most effective in preventing the final stage of opening breakers?

   • AImplementing multi-factor authentication for VPN access
   • BSegmenting the OT network from the corporate network
   • CPatching the HMI software to prevent known exploits
   • DRequiring out-of-band authorization for breaker operations
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A security consultant is assessing a refinery's ICS attack surface. She finds that the OT network is connected to the corporate network via a firewall, but the firewall allows all traffic from the corporate network to the OT network. Additionally, remote access is available via a VPN with shared credentials. Which recommendation should she prioritize?

   • AImplement strict firewall rules that only allow specific protocols and IP addresses
   • BReplace the firewall with a more advanced next-generation firewall
   • CAdd a second firewall in series for defense in depth
   • DDisable the VPN and require on-site access only
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Which of the following is considered a common attack vector for ICS/SCADA systems?

   • AUsing a USB drive to install a game on a personal computer
   • BExploiting a misconfigured firewall on a home router
   • CSending a crafted email to a random internet user
   • DExploiting a buffer overflow in a legacy control protocol
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Which of the following is a common entry point in the attack surface of an ICS/SCADA system?

   • AThe corporate website's public content
   • BThe company's social media accounts
   • CRemote access services such as VPN and RDP
   • DPhysical security guards at facility entrances
   Reveal Solution Discussion Select an answer first