A hospital's building management system (BMS) was infected with ransomware that locked the HVAC controls, causing discomfort but no patient harm. The hospital's security team believes the attack was opportunistic rather than targeted. Which threat actor is most likely responsible?

A hacktivist group protesting hospital policies

A state-sponsored group targeting healthcare infrastructure

A disgruntled employee with physical access to the BMS

A cybercriminal gang using automated scanning to find vulnerable systems

A water utility recently connected its SCADA network to the corporate IT network for remote monitoring. During a security review, the analyst finds that the engineering workstation can reach the internet directly and that the HMI software has no authentication. Which attack vector is most likely to be exploited first by an external threat actor?

Physical intrusion into the water treatment facility to attach a rogue device to the fieldbus

Direct exploitation of the HMI's missing authentication via the internet-facing workstation

Spear-phishing an operator to steal credentials for the corporate VPN

Intercepting radio communications between the RTUs and the master station

A food processing plant uses a wireless sensor network to monitor temperature in storage areas. The sensors communicate using an unencrypted protocol, and the wireless network is accessible from the parking lot. A security consultant is assessing the attack surface. Which finding represents the highest risk?

The storage area temperature is not logged for compliance

The wireless signal can be intercepted and spoofed from the parking lot

The sensors are not patched with the latest firmware

The plant's IT network uses a firewall

EC-CouncilICS/SCADA Cybersecurity

Domain 3Objective 5

How ICS/SCADA Are Targeted ICSSCADA Practice Questions (Page 9)

Part of the Introduction to Hacking ICS/SCADA domain, which makes up ~14% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–11 in this domain), expect 1–2 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

6concepts

Questions 41–43

41application · medium
A hospital's building management system (BMS) was infected with ransomware that locked the HVAC controls, causing discomfort but no patient harm. The hospital's security team believes the attack was opportunistic rather than targeted. Which threat actor is most likely responsible?
Select an answer first
42application · medium
A water utility recently connected its SCADA network to the corporate IT network for remote monitoring. During a security review, the analyst finds that the engineering workstation can reach the internet directly and that the HMI software has no authentication. Which attack vector is most likely to be exploited first by an external threat actor?
Select an answer first
43application · medium
A food processing plant uses a wireless sensor network to monitor temperature in storage areas. The sensors communicate using an unencrypted protocol, and the wireless network is accessible from the parking lot. A security consultant is assessing the attack surface. Which finding represents the highest risk?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to ICSSCADA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ICSSCADA” is a trademark of its owner, used for identification only.

How ICS/SCADA Are Targeted ICSSCADA Practice Questions (Page 9)

Questions 41–43

A hospital's building management system (BMS) was infected with ransomware that locked the HVAC controls, causing discomfort but no patient harm. The hospital's security team believes the attack was opportunistic rather than targeted. Which threat actor is most likely responsible?

Keep studying — Introduction to Hacking ICS/SCADA