A vulnerability scan of a factory's OT network has identified a critical vulnerability in a PLC's firmware. The scan report includes the CVE ID and a CVSS score. What is the most appropriate next step?

Ignore the vulnerability because it is in a PLC and not accessible from the internet

Document the finding and schedule a maintenance window for patching after testing

Replace all PLCs with newer models immediately

Immediately apply the firmware patch to all affected PLCs

EC-CouncilICS/SCADA Cybersecurity

Domain 3Objective 3

Scanning and Enumeration ICSSCADA Practice Questions (Page 10)

Part of the Introduction to Hacking ICS/SCADA domain, which makes up ~14% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–11 in this domain), expect 1–2 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

6concepts

Questions 46–46

46application · medium
A vulnerability scan of a factory's OT network has identified a critical vulnerability in a PLC's firmware. The scan report includes the CVE ID and a CVSS score. What is the most appropriate next step?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to ICSSCADA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ICSSCADA” is a trademark of its owner, used for identification only.

Scanning and Enumeration ICSSCADA Practice Questions (Page 10)

Questions 46–46

A vulnerability scan of a factory's OT network has identified a critical vulnerability in a PLC's firmware. The scan report includes the CVE ID and a CVSS score. What is the most appropriate next step?

Keep studying — Introduction to Hacking ICS/SCADA