What is a key characteristic of the master/slave model used by many ICS/SCADA protocols?

The master device initiates all communication, and slave devices respond only when polled

Communication is always broadcast to all devices on the network

Slave devices can initiate communication at any time to send alarms

All devices have equal status and can communicate with any other device directly

Which of the following is a common security vulnerability in many legacy ICS/SCADA protocols?

Built-in certificate revocation lists that are rarely updated

Excessive use of strong encryption, causing performance issues

Automatic patching mechanisms that introduce instability

Lack of authentication, allowing an attacker to inject false commands

What is the primary security risk when an ICS/SCADA protocol lacks integrity checks?

The protocol automatically encrypts all data, making it hard to troubleshoot

An attacker can modify data in transit without detection, causing incorrect readings or commands

The protocol becomes slower because it has to re-send corrupted packets

The protocol cannot operate over Ethernet networks

When analyzing ICS/SCADA protocol traffic, which of the following would be considered normal behavior?

A master device periodically polling slave devices at regular intervals

A device sending continuous high-volume data streams to a historian

A device sending a large number of broadcast messages to all network hosts

A slave device sending unsolicited commands to a master device

A security consultant is assessing a pipeline SCADA system that uses Modbus TCP. The consultant recommends adding a firewall rule to restrict which IP addresses can reach the Modbus TCP port. What vulnerability is this mitigation directly addressing?

Lack of integrity checks in Modbus

Lack of authentication in Modbus

Lack of time synchronization in Modbus

EC-CouncilICS/SCADA Cybersecurity

Domain 2Objective 6

ICS/SCADA Protocols ICSSCADA Practice Questions (Page 2)

Part of the TCP/IP and ICS/SCADA Protocols domain, which makes up ~13% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–10 in this domain), expect 1–2 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

5concepts

Questions 6–10

6foundation · easy
What is a key characteristic of the master/slave model used by many ICS/SCADA protocols?
Select an answer first
7foundation · easy
Which of the following is a common security vulnerability in many legacy ICS/SCADA protocols?
Select an answer first
8foundation · easy
What is the primary security risk when an ICS/SCADA protocol lacks integrity checks?
Select an answer first
9foundation · easy
When analyzing ICS/SCADA protocol traffic, which of the following would be considered normal behavior?
Select an answer first
10application · medium
A security consultant is assessing a pipeline SCADA system that uses Modbus TCP. The consultant recommends adding a firewall rule to restrict which IP addresses can reach the Modbus TCP port. What vulnerability is this mitigation directly addressing?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ICSSCADA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ICSSCADA” is a trademark of its owner, used for identification only.