Scanning and Enumeration ICSSCADA Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A security engineer is planning a scan of a mining operation's OT network. The network includes a mix of modern and legacy devices. The engineer wants to minimize the risk of disrupting operations. Which scanning technique should be used?

   • AScan all ports with default timing
   • BUse a slow scan rate with a limited port range
   • CUse a full TCP connect scan on all ports
   • DUse a fast scan rate to complete the scan quickly
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A security manager is planning a vulnerability scan for a nuclear power plant's control system. The plant has strict safety regulations that prohibit any active scanning during operation. The scan must be performed during a scheduled outage. Which approach is most appropriate?

   • APerform a passive scan during operation and skip active scanning
   • BRun an active scan during operation with a fast timing template
   • CSchedule the active scan during the outage and use a conservative scan profile
   • DSkip the scan and rely on vendor advisories
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which of the following is a recommended practice when using vulnerability scanners in an ICS/SCADA environment?

   • APerform scans only during scheduled maintenance windows
   • BRun the scanner with default aggressive settings to ensure comprehensive coverage
   • CUse only passive scanning techniques for all devices
   • DScan all devices simultaneously to save time
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A security analyst is mapping a rail transit system's OT network. The analyst has scan data showing multiple PLCs, RTUs, and a central control server. The analyst also has firewall logs showing allowed traffic flows. The goal is to create a logical topology that reflects actual communication paths. Which data source is most reliable for this purpose?

   • AThe scan data, because it shows all open ports
   • BThe device inventory list, because it lists all devices
   • CThe network diagram from the vendor, because it is official
   • DThe firewall logs, because they show actual allowed traffic flows
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   When enumerating ICS/SCADA devices, which protocol is specifically designed for industrial automation and is commonly used to read and write data to PLCs and RTUs?

   • ADNP3
   • BOPC
   • CModbus
   • DPROFINET
   Reveal Solution Discussion Select an answer first