ICS/SCADA Vulnerabilities ICSSCADA Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is a key consideration when applying patches to ICS/SCADA devices?

   • APatches should only be applied during normal business hours
   • BPatches are not needed for ICS/SCADA systems
   • CPatches should be applied immediately without testing to minimize risk
   • DPatches must be tested in a non-production environment before deployment
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A SCADA engineer notices that the engineering workstation can communicate with PLCs on the plant floor using EtherNet/IP, but the workstation also has a connection to the corporate network for email. A security review is being conducted. Which vulnerability is most directly introduced by this configuration?

   • AThe PLCs are vulnerable to EtherNet/IP protocol-specific attacks.
   • BThe workstation's operating system is outdated.
   • CThe corporate network can be used as a pivot point to reach the PLCs through the dual-homed workstation.
   • DThe email client could introduce malware to the workstation.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A food processing plant uses a distributed control system (DCS) with a vulnerability in the OPC server that allows a remote attacker to cause a denial of service. The OPC server is critical for communication between the HMI and the controllers. The plant has a backup OPC server that can be manually switched over. What is the most significant impact of this vulnerability?

   • AThe controllers would continue to operate normally without the OPC server.
   • BThe attacker could steal recipe data from the OPC server.
   • CThe backup OPC server would automatically take over without any impact.
   • DOperators could lose visibility and control of the process, requiring manual intervention and potentially causing product spoilage.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A pipeline operator has a vulnerability in the leak detection system that could cause false alarms, and another in the pressure control system that could allow an attacker to overpressurize the pipeline. The leak detection system is internet-accessible, while the pressure control system is on an isolated network. Which vulnerability should be prioritized?

   • AThe leak detection vulnerability, because it could cause operational disruption and loss of production.
   • BThe pressure control vulnerability, because overpressurization could cause a pipeline rupture and environmental disaster.
   • CThe leak detection vulnerability, because it is internet-accessible and more likely to be exploited.
   • DBoth equally, because both are in the same pipeline system.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A manufacturing plant uses a wireless HART network for vibration sensors on critical pumps. The network is not encrypted, and an attacker could inject false vibration readings. What is the most appropriate mitigation to ensure data integrity?

   • AUse a different wireless protocol that is proprietary.
   • BIncrease the polling rate of the sensors.
   • CInstall a signal jammer to prevent unauthorized access.
   • DEnable WirelessHART security features, including encryption and message authentication.
   Reveal Solution Discussion Select an answer first