ICS/SCADA Vulnerabilities ICSSCADA Practice Questions (Page 9)

Questions 41–43

1. 41application · medium

   A mining operation uses a SCADA system with a wireless mesh network for remote sensors. The network uses WPA2 encryption, but the sensors themselves have no authentication and can be spoofed. Which mitigation is most appropriate to prevent sensor spoofing?

   • AUse a stronger encryption algorithm on the wireless network, such as AES-256.
   • BIncrease the frequency of sensor data transmissions to make spoofing more difficult.
   • CImplement mutual authentication between sensors and the SCADA master using digital certificates.
   • DPhysically secure the sensors to prevent tampering.
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   A vulnerability in a building's HVAC control system could allow an attacker to set the temperature to extreme levels in a server room. Which of the following is the most significant potential impact?

   • ADamage to the HVAC equipment itself from running at extreme settings.
   • BOverheating of servers could lead to a data center outage and loss of critical services.
   • CComfort issues for employees working in the server room.
   • DIncreased energy costs due to the HVAC system running at extreme settings.
   Reveal Solution Discussion Select an answer first
3. 43application · medium

   A cyber-physical attack on a wastewater treatment plant could cause the system to release untreated sewage. Which of the following best describes the most significant potential impact of this vulnerability?

   • AFinancial loss from the cost of repairing the plant's equipment.
   • BLegal penalties for non-compliance with environmental regulations.
   • CEnvironmental contamination and public health risk due to the release of untreated sewage.
   • DLoss of customer trust and reputation damage for the utility.
   Reveal Solution Discussion Select an answer first