Identify Vulnerabilities and Exploitation ICSSCADA Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A cyber attack on a railway signaling system exploits a vulnerability in the interlocking system, allowing the attacker to send false track occupancy signals. The safety system is independent, but the interlocking system is now showing conflicting information. What is the most critical impact to assess?

   • APotential train collision due to conflicting track occupancy signals
   • BFinancial loss due to service disruption
   • CLoss of passenger confidence in the railway system
   • DLegal liability for the railway operator
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which of the following is a common vulnerability found in legacy ICS/SCADA hardware components?

   • AUnencrypted communication protocols
   • BHardcoded credentials in firmware
   • CInsufficient physical tamper resistance
   • DMissing input validation in HMI applications
   Reveal Solution Discussion Select an answer first
4. 3expert · hard · select all that apply

   A security consultant is assessing a food and beverage manufacturing facility. The facility uses a mix of modern and legacy PLCs, and the network is flat. The consultant identifies the following vulnerabilities: default credentials on the HMI, unencrypted Ethernet/IP traffic, a known buffer overflow in a legacy PLC, and lack of network segmentation. The facility cannot replace the legacy PLCs immediately. Which of the following mitigations should the consultant recommend? (Select all that apply.)

   • AReplace the legacy PLCs with modern ones that have built-in security
   • BChange all default credentials on the HMI and other OT devices
   • CDeploy an intrusion detection system (IDS) to monitor OT traffic for anomalies
   • DSegment the network with firewalls to limit access to the legacy PLCs
   • EDisconnect the legacy PLCs from the network and use manual control
   Check answers Discussion Select an answer first
5. 4application · medium

   A factory's OT network has a mix of devices from multiple vendors, some of which are no longer supported. The factory is planning to implement a vulnerability management program. What is the most important first step in this program?

   • APurchase a commercial vulnerability scanner and run it against all OT devices.
   • BHire a third-party security consultant to conduct a penetration test.
   • CImmediately apply all available patches to all devices to reduce the attack surface.
   • DCreate an inventory of all OT assets, including hardware, software, and firmware versions.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A utility company is planning to implement a security monitoring solution for its OT network. The network consists of several substations connected via a WAN. The company has a limited budget and must choose between deploying an IDS at each substation or deploying a centralized SIEM that collects logs from all devices. The company's primary concern is detecting attacks that exploit protocol vulnerabilities in real-time. Which solution is more appropriate?

   • ADeploy a centralized SIEM, as it provides a holistic view of the entire OT network and can correlate events across substations.
   • BDeploy both, but prioritize the SIEM over the IDS due to budget constraints.
   • CDeploy a honeypot at the central office to attract attackers and learn about their techniques.
   • DDeploy an IDS at each substation, as it can inspect network traffic in real-time and detect protocol-specific attacks.
   Reveal Solution Discussion Select an answer first