Identify Vulnerabilities and Exploitation ICSSCADA Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A cyber incident at a natural gas pipeline company results in an attacker using a command injection vulnerability to alter the pressure setpoints in a compressor station. What is the most critical impact to assess?

   • AThe attacker would gain access to the corporate email system
   • BPotential overpressure of the pipeline, leading to rupture and release of gas
   • CLoss of customer billing data stored on the same network
   • DThe compressor station's control system would be unavailable for a few hours
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A power utility has a SCADA system with legacy devices that cannot be patched. The utility is required to maintain high availability and cannot afford a full network redesign. A recent security assessment identified that the legacy devices are exposed to the corporate network. Which mitigation approach is most appropriate?

   • ARely on the corporate firewall to protect the legacy devices
   • BDisconnect the legacy devices from the corporate network and use manual data collection
   • CReplace the legacy devices with modern ones that have built-in security
   • DImplement a demilitarized zone (DMZ) with firewalls and a data diode to control data flow between the corporate and OT networks
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A penetration tester is assessing a natural gas pipeline's SCADA system. The tester discovers that the HMI application parses a vendor-specific binary file format without proper bounds checking. The tester crafts a malformed file that, when opened by an operator, causes the HMI process to crash and restart. What is the most likely exploitation technique being used, and what is the primary immediate impact?

   • ABuffer overflow, leading to a denial of service of the HMI and loss of operator visibility.
   • BMan-in-the-middle attack, leading to interception of operator credentials.
   • CSQL injection, leading to corruption of the historical process database.
   • DCommand injection, leading to unauthorized changes in pipeline pressure setpoints.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which of the following is a common software vulnerability in ICS/SCADA systems?

   • AUnsegmented flat networks
   • BWeak physical locks on control cabinets
   • CLack of security guards at facility entrances
   • DUnpatched operating systems on engineering workstations
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which of the following is a common mitigation strategy to prevent exploitation of ICS/SCADA network vulnerabilities?

   • ANetwork segmentation and firewalls
   • BDisabling all logging to save storage
   • CAllowing direct internet access to PLCs for remote monitoring
   • DUsing shared credentials for simplicity
   Reveal Solution Discussion Select an answer first