ICS/SCADA Vulnerabilities ICSSCADA Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A railway signaling system uses a proprietary protocol with no authentication. The system is scheduled for replacement in two years, but a vulnerability has been discovered that could allow an attacker to send false track occupancy signals. Which mitigation strategy is most appropriate in the interim?

   • ADeploy an intrusion detection system (IDS) that monitors for anomalous signaling messages and alerts operators.
   • BImmediately replace the signaling system with a modern, authenticated system.
   • CDisable the signaling system and use manual train control procedures.
   • DApply a vendor patch that adds authentication to the proprietary protocol.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A mining operation uses a SCADA system that relies on a legacy Windows Server 2003 for data historian services. The server is end-of-life and cannot be patched. The company is planning a migration to a modern historian, but it will take six months. What is the most appropriate interim mitigation?

   • AInstall third-party antivirus software on the server.
   • BIsolate the legacy server on a separate VLAN with strict firewall rules that only allow the SCADA network to access it.
   • CDisconnect the server from the network and use manual data collection.
   • DUpgrade the server to Windows Server 2019 immediately.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the most significant potential impact of a vulnerability exploited in an ICS/SCADA system that controls a chemical plant?

   • APhysical damage to equipment and potential harm to personnel
   • BLoss of confidentiality of production data
   • CLoss of data integrity in the corporate database
   • DIncreased network traffic and bandwidth consumption
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A factory uses a SCADA system with a mix of modern and legacy devices. The legacy devices do not support encryption. Management wants to secure the network without upgrading the legacy devices. Which approach is most appropriate?

   • APlace the legacy devices on a separate network segment and use a gateway to translate and secure communications with the rest of the system.
   • BDisable the legacy devices and replace them with modern ones that support encryption.
   • CApply a firmware patch to the legacy devices to add encryption support.
   • DUse a network tap to monitor all traffic and manually review it for anomalies.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A water distribution system uses a legacy protocol that broadcasts all telemetry data to every device on the network. An attacker could potentially intercept this data. Which mitigation is most effective to protect the confidentiality of the telemetry data?

   • ASegment the network so that only the SCADA master and relevant field devices can communicate, and use encryption where possible.
   • BUse a directional antenna on the network to limit the physical range of the broadcast.
   • CChange the protocol to a proprietary one that is not publicly documented.
   • DIncrease the broadcast interval to reduce the amount of data an attacker can capture.
   Reveal Solution Discussion Select an answer first