Life Cycle of a Vulnerability and Exploit ICSSCADA Practice Questions (Page 8)

Questions 36–39

1. 36expert · hard

   A security analyst is constructing a vulnerability life cycle timeline for a flaw in a natural gas compressor station's control system. The vulnerability was discovered by a vendor researcher, and the vendor has developed a patch but is holding it for a scheduled release in three months. Meanwhile, a third-party researcher has independently discovered the same vulnerability and plans to disclose it publicly next week. What is the best course of action for the vendor?

   • AStick to the scheduled release and hope the disclosure does not happen
   • BRelease the patch immediately to beat the public disclosure
   • CKeep the patch confidential and release it as scheduled
   • DAsk the third-party researcher to delay disclosure
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   Which stage of the exploit life cycle involves the actual use of an exploit against a target system?

   • AExploit testing
   • BExploit development
   • CExploit deployment
   • DVulnerability assessment
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A manufacturing plant has a vulnerability in its industrial control system that is in the 'patch available' stage. However, the plant's change management process requires a two-week testing period before deployment. During this time, the plant is at increased risk. What should the security team do to reduce the risk during this period?

   • ADisconnect the affected systems from the network until the patch is deployed
   • BDeploy the patch immediately without testing to reduce the risk window
   • CImplement temporary monitoring and intrusion detection rules for the vulnerability
   • DIgnore the risk because the patch will be deployed in two weeks
   Reveal Solution Discussion Select an answer first
5. 39expert · hard

   A vulnerability in a building management system (BMS) was disclosed publicly two weeks ago. The vendor has released a patch, but the facility manager has delayed deployment because of a scheduled production shutdown next month. Meanwhile, a proof-of-concept exploit has been published. What is the most appropriate risk management decision?

   • AIgnore the exploit because it is only a proof-of-concept
   • BDeploy the patch immediately despite the production shutdown
   • CAsk the vendor to provide a hotfix that can be applied without a shutdown
   • DContinue with the planned patch deployment during the shutdown and implement temporary mitigations
   Reveal Solution Discussion Select an answer first