A power utility wants to reduce the amount of publicly available information that an attacker could use to footprint its ICS environment. Which countermeasure is most effective for this goal?

Establishing a data classification policy and reviewing external-facing documents, job postings, and website content for sensitive OT details, then redacting or removing them

Using a takedown service to remove any mentions of the utility from Shodan and other internet-scanning databases

Removing all OT-related content from the company website, including case studies and partner announcements

Implementing a strict social media policy that prohibits employees from posting about their work, including job titles and project details

Which countermeasure is most effective in reducing the risk of footprinting against an ICS/SCADA environment?

Using default passwords on all devices to avoid configuration errors

Segmenting the ICS network from the corporate network and the internet

Allowing unrestricted internet access to the SCADA system for remote monitoring

Disabling all logging on ICS devices to reduce the attack surface

A security manager wants to reduce the effectiveness of passive footprinting against their electric utility. Which combination of countermeasures is most effective?

Implementing a strict social media policy and removing technical details from public procurement documents

Enforcing strong passwords and MFA

Segmenting the network and using firewalls

Deploying an IDS and conducting regular vulnerability scans

An OT security team is footprinting a legacy SCADA system that uses a mix of Modbus and proprietary protocols. The team needs to identify the operating systems and services on all devices, but the system is highly sensitive and any disruption could cause a production outage. The team has a network tap and a maintenance window of two hours. Which approach best balances the need for information with the risk of disruption?

Run a full Nmap scan with OS detection and service version detection on all devices during the maintenance window

Use a vulnerability scanner with a full ICS plugin set to enumerate all devices

Use passive network monitoring to capture traffic and analyze it for OS and service fingerprints, then use targeted Nmap scans only on devices that do not reveal enough information

Skip active scanning entirely and rely only on passive monitoring, even if some devices remain unidentified

A network engineer is footprinting a wind farm's SCADA network. The engineer has access to a network tap that mirrors all traffic between the wind turbines and the control center. The goal is to create a network topology map. Which approach is most effective?

Run Nmap with a ping sweep on the control center subnet to identify live hosts

Use traceroute from the control center to each turbine IP to map the network path

Query the SCADA system's historian database for a list of device IP addresses

Use Wireshark to capture traffic and then analyze the IP addresses, protocols, and communication patterns to infer the topology

EC-CouncilICS/SCADA Cybersecurity

Domain 3Objective 2

Intelligence Gathering and Footprinting ICSSCADA Practice Questions (Page 10)

Part of the Introduction to Hacking ICS/SCADA domain, which makes up ~14% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–11 in this domain), expect 1–2 from this objective — we provide 50 practice questions to prepare you well beyond it. (estimate)

50questions here

10free pages

9concepts

Questions 46–50

46application · medium
A power utility wants to reduce the amount of publicly available information that an attacker could use to footprint its ICS environment. Which countermeasure is most effective for this goal?
Select an answer first
47foundation · easy
Which countermeasure is most effective in reducing the risk of footprinting against an ICS/SCADA environment?
Select an answer first
48application · medium
A security manager wants to reduce the effectiveness of passive footprinting against their electric utility. Which combination of countermeasures is most effective?
Select an answer first
49expert · hard
An OT security team is footprinting a legacy SCADA system that uses a mix of Modbus and proprietary protocols. The team needs to identify the operating systems and services on all devices, but the system is highly sensitive and any disruption could cause a production outage. The team has a network tap and a maintenance window of two hours. Which approach best balances the need for information with the risk of disruption?
Select an answer first
50application · medium
A network engineer is footprinting a wind farm's SCADA network. The engineer has access to a network tap that mirrors all traffic between the wind turbines and the control center. The goal is to create a network topology map. Which approach is most effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to ICSSCADA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ICSSCADA” is a trademark of its owner, used for identification only.