Identify Vulnerabilities and Exploitation ICSSCADA Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A cyber incident at a nuclear power plant involves an attacker exploiting a vulnerability in the plant's control system to alter the cooling water flow rate. The plant's safety systems are independent and functioning, but the control system is now operating outside normal parameters. What is the most critical impact to assess?

   • ALegal liability for the plant operators
   • BPotential overheating of the reactor core, which could lead to a nuclear safety incident
   • CFinancial loss due to reduced power output
   • DLoss of public confidence in the plant's cybersecurity posture
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   An attacker on the OT network is using a tool to capture and replay Modbus TCP packets between an HMI and a PLC. The attacker replays a 'stop' command to the PLC, halting a conveyor belt. What is the primary technique being used?

   • AReplay attack, which exploits the lack of authentication and sequence numbers in the Modbus protocol
   • BMan-in-the-middle attack, which modifies the stop command in transit
   • CBuffer overflow attack, which corrupts the PLC's memory to execute the stop command
   • DCommand injection attack, which injects a stop command into the HMI's database
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A pharmaceutical company's OT network has a mix of modern and legacy devices. The company is required to maintain production uptime and cannot afford a full network redesign. Which mitigation approach best balances security and operational continuity?

   • AReplace all legacy devices with modern ones that have built-in security
   • BRely solely on antivirus software installed on the HMI and engineering workstations
   • CImplement network segmentation with firewalls and deploy an intrusion detection system (IDS) to monitor traffic
   • DDisconnect all OT devices from the network and use manual controls
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A cyber attack on a power generation facility exploits a vulnerability in the historian database, allowing the attacker to modify historical process data. What is the most significant impact of this attack?

   • ALoss of data integrity, which can lead to incorrect analysis and decision-making by operators and engineers
   • BLoss of availability of the historian, causing operators to lose real-time data
   • CUnauthorized access to corporate financial records stored on the same server
   • DImmediate physical damage to the turbines, as the historian directly controls them
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A wastewater treatment plant has a SCADA system that controls the chlorination process. An attacker has exploited a vulnerability in the HMI to change the chlorine dosage setpoint to a dangerously high level. What is the most critical potential impact of this attack?

   • AThe plant will incur higher operational costs due to increased chlorine usage.
   • BThe plant could release water with excessive chlorine, posing a serious public health risk.
   • CThe plant will produce water with an unpleasant taste and odor, leading to customer complaints.
   • DThe plant will experience a denial of service, causing a loss of monitoring and control capabilities.
   Reveal Solution Discussion Select an answer first