ICS/SCADA Vulnerabilities ICSSCADA Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A vulnerability scan of a power distribution SCADA system identifies two issues: a buffer overflow in a substation RTU that is remotely exploitable, and a weak password on a local engineering workstation. The RTU controls a circuit breaker; the workstation is used only for configuration during maintenance. Which vulnerability should be prioritized for immediate remediation?

   • AThe buffer overflow in the RTU, because it is remotely exploitable and affects a safety-critical asset.
   • BNeither, because SCADA systems are air-gapped and cannot be attacked remotely.
   • CThe weak password on the workstation, because it is easier to fix and requires no downtime.
   • DBoth equally, because all vulnerabilities must be fixed at the same priority.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which of the following best describes the impact of a denial-of-service (DoS) attack on a SCADA system?

   • AIt only causes a temporary loss of data, which is easily recovered
   • BIt can prevent operators from monitoring and controlling industrial processes
   • CIt has no impact on physical processes
   • DIt only affects the corporate email system
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A utility has two vulnerabilities: one in the customer billing system that could expose credit card data, and one in the SCADA system that could allow an attacker to manipulate electrical load readings. The SCADA system is not directly connected to the internet, but the billing system is. Which vulnerability should be prioritized?

   • AThe billing system vulnerability, because it is internet-facing and more likely to be exploited.
   • BThe billing system vulnerability, because data breaches are more common and costly.
   • CBoth equally, because both involve sensitive data and critical infrastructure.
   • DThe SCADA vulnerability, because manipulating load readings could lead to grid instability and blackouts.
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A hospital's building automation system (BAS) controls HVAC and access doors. A vulnerability exists in the BAS controller that could allow an attacker to disable the HVAC in critical areas, and another vulnerability in the access control system could allow unauthorized entry. The hospital has limited IT staff and must prioritize. Which should be addressed first?

   • AThe access control vulnerability, because unauthorized entry directly threatens patient and staff safety and security.
   • BBoth equally, because both are in the same facility and have similar risk levels.
   • CNeither, because building automation systems are not critical to hospital operations.
   • DThe HVAC vulnerability, because loss of climate control can cause equipment failure and patient discomfort.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   When prioritizing vulnerabilities in an ICS/SCADA environment, which factor should be given the most weight?

   • AThe ease of exploitation and the criticality of the affected asset
   • BThe age of the vulnerability
   • CThe number of vendors affected
   • DThe cost of the mitigation
   Reveal Solution Discussion Select an answer first