Intelligence Gathering and Footprinting ICSSCADA Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A manufacturing company has discovered that an attacker was able to footprint its ICS environment by piecing together information from job postings, employee social media profiles, and a conference presentation given by a senior engineer. Which countermeasure would be most effective in preventing this type of information aggregation?

   • AImplementing a comprehensive security awareness training program that includes guidance on what employees can share publicly
   • BUsing a legal takedown service to remove the conference presentation and social media posts
   • CDeploying a data loss prevention (DLP) system on the corporate network to monitor outbound emails
   • DCreating a cross-functional review team to audit and sanitize all public-facing content, including job postings, social media, and conference materials
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   An assessor is footprinting a chemical plant's OT network and needs to identify the operating systems and services running on PLCs and RTUs. The assessor has network access but must avoid crashing legacy devices. Which tool and technique combination is most appropriate?

   • AUse a passive network sniffer to analyze traffic and identify device types and firmware versions from protocol banners
   • BUse a vulnerability scanner with a full ICS plugin set to enumerate device details
   • CUse Nmap with the -O option to perform OS fingerprinting on every discovered host
   • DUse Nmap with the -sV option to perform service version detection on common ICS ports only
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which statement best describes footprinting in the context of ICS/SCADA cybersecurity?

   • AIt is the process of actively scanning and probing ICS/SCADA systems to identify live hosts and open ports
   • BIt is the process of exploiting vulnerabilities in ICS/SCADA systems to gain unauthorized access
   • CIt is the method of maintaining access to ICS/SCADA systems after an initial compromise
   • DIt is the systematic collection of information about a target ICS/SCADA environment to create a profile for planning an attack
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which of the following is an example of system footprinting on an ICS/SCADA device?

   • AFinding the names of the plant managers through LinkedIn
   • BIdentifying the firmware version of a PLC by querying its web interface
   • CIdentifying the organization's office locations from its website
   • DMapping the network path to the SCADA server using traceroute
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is a limitation of using Shodan for footprinting ICS/SCADA systems?

   • AIt only provides information about devices that are directly connected to the internet
   • BIt cannot identify the operating system of a device
   • CIt is only effective for finding devices using the Modbus protocol
   • DIt requires active scanning of the target network to gather data
   Reveal Solution Discussion Select an answer first