ICS/SCADA Vulnerabilities ICSSCADA Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A power generation plant has limited patching windows. Two vulnerabilities are identified: (1) a critical remote code execution in the engineering workstation's operating system, and (2) a moderate vulnerability in the protective relay that could allow an attacker to change settings, but only if they have physical access to the relay. Which vulnerability should be patched first?

   • AThe engineering workstation, because it is remotely exploitable and could lead to full control of the plant network.
   • BThe protective relay, because it is a safety-critical device.
   • CNeither, because the plant can operate without patching.
   • DBoth simultaneously, because both are critical.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which of the following is a common vulnerability specific to ICS/SCADA systems?

   • AUse of proprietary protocols that lack authentication and encryption
   • BImplementation of network segmentation between IT and OT networks
   • CRegular patching of all devices and systems
   • DUse of standard IT protocols like HTTPS for all communications
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A cyber attack on a dam control system could cause the gates to open unexpectedly, leading to downstream flooding. Which of the following is the most critical impact to consider when analyzing this vulnerability?

   • AThe cost of repairing the dam's control system after the attack.
   • BThe reputational damage to the agency operating the dam.
   • CThe loss of electricity generation capacity if the dam is hydroelectric.
   • DPotential loss of life and property damage in downstream communities.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A manufacturing plant uses a legacy serial-based SCADA system with no encryption. The plant is planning to connect this system to the corporate network for remote monitoring. Which mitigation should be implemented to secure the connection?

   • ADeploy a serial-to-Ethernet gateway with TLS encryption and strong authentication for all remote access.
   • BConnect the serial system directly to the corporate network without any additional security controls.
   • CDisable remote monitoring and keep the system isolated from the corporate network.
   • DUse a simple TCP/IP converter without encryption to maintain compatibility with legacy devices.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A natural gas pipeline SCADA system has a vulnerability in the HMI software that could allow an attacker to manipulate the operator's view of valve positions. The system also has a separate vulnerability in the historian that could allow data exfiltration. The pipeline is currently operating normally. Which vulnerability should be prioritized for remediation?

   • ANeither, because the system is operating normally and there is no immediate threat.
   • BBoth equally, because any vulnerability in a critical infrastructure system is equally important.
   • CThe historian vulnerability, because data exfiltration is a confidentiality breach that must be addressed first.
   • DThe HMI vulnerability, because manipulating the operator's view could lead to incorrect operational decisions and potentially unsafe conditions.
   Reveal Solution Discussion Select an answer first