Life Cycle of a Vulnerability and Exploit ICSSCADA Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which stage of the vulnerability life cycle involves creating and testing a fix for the identified flaw?

   • ADiscovery
   • BPatch development
   • CPatch deployment
   • DDisclosure
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A vulnerability in a distributed control system (DCS) was discovered by a security researcher and disclosed to the vendor. The vendor has not yet released a patch, but the researcher has published a detailed analysis of the vulnerability. The DCS is used in a nuclear power plant, and the plant's safety regulations require that any known vulnerability be mitigated within 48 hours. What is the most appropriate action?

   • AImplement a compensating control, such as network segmentation and enhanced monitoring
   • BIgnore the vulnerability because the researcher's analysis is not an exploit
   • CContact the vendor and demand an immediate patch
   • DShut down the DCS until a patch is available
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   In the exploit life cycle, what is the stage where an attacker creates a working method to take advantage of a vulnerability?

   • AExploit development
   • BVulnerability discovery
   • CPatch release
   • DExploit deployment
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A security analyst at a power plant notices that a newly discovered vulnerability in a PLC firmware has a proof-of-concept (PoC) exploit published on a public forum. The vendor has released a patch, but the patch has not been tested in the plant's environment. What should the analyst do first to minimize the risk of an exploit being used against the plant?

   • ADisable the affected PLCs until the patch is tested
   • BDeploy the patch immediately to all affected PLCs
   • CMonitor the public forum for updated exploit code
   • DTest the patch in a staging environment that mirrors the plant's setup
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A vulnerability in a pipeline control system was discovered by an internal security team. The team has confirmed the vulnerability and is preparing to disclose it to the vendor. However, the team also found that the vulnerability is already being exploited in the wild. What is the most appropriate next step?

   • AWait for the vendor to discover the vulnerability on their own
   • BKeep the vulnerability confidential until a patch is ready
   • CDisclose the vulnerability to the vendor immediately and request an emergency patch
   • DPublicly disclose the vulnerability to warn other organizations
   Reveal Solution Discussion Select an answer first