Identify Vulnerabilities and Exploitation ICSSCADA Practice Questions (Page 7)

Questions 31–35

1. 31expert · hard

   A power plant's turbine control system is connected to a corporate network for remote monitoring. An attacker has compromised a corporate server and is now attempting to pivot to the turbine control system. The control system uses a proprietary protocol that is not encrypted. What is the most significant risk to the turbine's physical operation?

   • AThe attacker could perform a man-in-the-middle attack to alter turbine speed setpoints, potentially causing a overspeed condition and catastrophic failure.
   • BThe attacker could steal sensitive operational data, such as turbine efficiency metrics, leading to a loss of competitive advantage.
   • CThe attacker could cause a denial of service by flooding the control system with traffic, causing a loss of visibility.
   • DThe attacker could install malware on the corporate server that spreads to the control system, causing a slow degradation of performance.
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   A chemical plant has a distributed control system (DCS) where the safety instrumented system (SIS) is separate from the basic process control system (BPCS). An attacker has exploited a vulnerability in the BPCS's OPC server, gaining the ability to write to process tags. The SIS is not directly connected to the corporate network and is considered isolated. What is the most significant risk to the plant's safety?

   • AThe attacker can manipulate BPCS process values, causing the process to operate outside safe limits and potentially forcing the SIS to trip the plant.
   • BThe attacker can cause a denial of service on the BPCS, which will prevent the SIS from receiving process data.
   • CThe attacker can directly modify the SIS logic to disable safety functions.
   • DThe attacker can steal process data from the OPC server, leading to a loss of intellectual property.
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A pharmaceutical manufacturing plant has a batch reactor where an attacker has exploited a vulnerability in the historian data collection service. The attacker is able to modify the temperature readings sent to the batch control system, causing it to believe the reactor is cooler than it actually is. What is the most significant potential impact of this manipulation?

   • AThe historian database will store inaccurate data, affecting regulatory compliance reporting.
   • BThe data historian service will crash, causing a loss of historical data.
   • CThe operator's HMI will display incorrect values, causing confusion but no direct physical harm.
   • DThe batch control system will continue heating the reactor, potentially causing a thermal runaway and a hazardous chemical release.
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A security assessment of a power utility's SCADA system reveals that the HMI software is running with administrative privileges and has a known buffer overflow vulnerability. What is the most likely consequence if an attacker exploits this vulnerability?

   • AThe PLCs would automatically disconnect from the HMI to prevent further damage
   • BThe attacker could gain full control of the HMI workstation and potentially manipulate the SCADA system
   • CThe HMI software would crash, but the attacker would only gain limited user access
   • DThe attacker could only read data from the HMI, not modify any settings
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   Which of the following is a potential impact of exploiting a vulnerability in an ICS/SCADA system that controls a power grid?

   • AUnauthorized access to customer billing data
   • BTheft of proprietary turbine design documents
   • CWidespread power outages affecting public safety
   • DUnauthorized modification of employee payroll records
   Reveal Solution Discussion Select an answer first