Intelligence Gathering and Footprinting ICSSCADA Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A utility company wants to prevent attackers from using Shodan to identify its internet-exposed SCADA devices. Which countermeasure is most effective?

   • AChanging the default ports of the SCADA protocols to non-standard ports
   • BImplementing an intrusion detection system (IDS) to monitor for Shodan scans
   • CPlacing all SCADA devices behind a firewall and using VPN or bastion hosts for remote access
   • DRequesting removal of the devices from Shodan's database
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A cybersecurity analyst is conducting OSINT on a pharmaceutical company's ICS environment. The analyst has found a job posting for a 'Control Systems Engineer' that mentions specific PLC brands and a 'DeltaV DCS' system. Which additional OSINT source would most effectively corroborate and expand this technical information?

   • ALocal newspaper articles about the company's expansion plans
   • BThe company's social media page, which may post photos of facility upgrades
   • CA technical paper presented by the company's engineers at an industry conference, detailing their DCS migration project
   • DThe company's annual report, which may mention capital investments in automation
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which of the following is an example of passive information gathering about an ICS/SCADA system?

   • AConnecting to an HMI's web interface to view its login page
   • BSending ICMP echo requests to a range of IP addresses to identify live hosts
   • CUsing Shodan to search for internet-exposed SCADA devices
   • DPerforming a port scan on a PLC's IP address to identify open services
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   In the context of ICS/SCADA cybersecurity, what is the primary purpose of footprinting in the attack lifecycle?

   • ATo identify potential vulnerabilities and entry points in the target environment before launching an attack
   • BTo directly exploit known vulnerabilities in the target's ICS/SCADA systems
   • CTo remove traces of unauthorized activity from the target's systems
   • DTo establish persistent access to the target's control network for future operations
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which source would be most useful for organizational footprinting of an ICS/SCADA operator?

   • AA Nmap scan of the company's public IP range
   • BA traceroute to the company's SCADA server
   • CThe company's LinkedIn page showing employee roles and departments
   • DA Shodan search for the company's SCADA devices
   Reveal Solution Discussion Select an answer first