You are assessing a railway signaling system. A device on 192.168.10.50 responds to a TCP connection on port 4840 with a banner that includes 'OPC UA Server - Vendor: Siemens'. You need to identify the device's role in the signaling system. What is the best next step?

Ping the device with a large ICMP packet to verify it is alive

Send a Modbus read request to port 502

Run a vulnerability scan against the device to see if it has known CVEs

Query the OPC UA server's node tree to discover the available data points

You are mapping a pipeline's OT network. You have scan results showing multiple subnets, but the firewall rules are not available. You need to infer the logical topology. Which additional data source is most useful?

NetFlow or sFlow data from the core switches

The MAC address vendor lookup for each device

After scanning a food processing plant, you have identified several PLCs, HMIs, and a historian. You need to create a logical map that shows the data flow. Which information is most useful?

The IP addresses and subnet masks of all devices

The firewall rules and routing tables

The vendor and model of each device

The firmware versions of the devices

After scanning a wastewater treatment plant, an analyst has identified the following: a PLC at 10.0.0.5 with Modbus TCP port 502 open, an HMI at 10.0.0.10 with port 80 open, and a historian at 10.0.0.20 with port 1433 open. The analyst needs to create a logical map. Which relationship is most likely to be correct?

The historian communicates with the HMI using Modbus TCP

The HMI communicates with the PLC using Modbus TCP

The PLC communicates directly with the historian using HTTP

The PLC communicates with the historian using SQL

EC-CouncilICS/SCADA Cybersecurity

Domain 3Objective 3

Scanning and Enumeration ICSSCADA Practice Questions (Page 7)

Part of the Introduction to Hacking ICS/SCADA domain, which makes up ~14% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–11 in this domain), expect 1–2 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

6concepts

Questions 31–35

31application · medium
During an assessment of a building automation system, you find a device on UDP port 47808. You need to enumerate the device's points and attributes. Which protocol should you use?
Select an answer first
32application · medium
You are assessing a railway signaling system. A device on 192.168.10.50 responds to a TCP connection on port 4840 with a banner that includes 'OPC UA Server - Vendor: Siemens'. You need to identify the device's role in the signaling system. What is the best next step?
Select an answer first
33expert · hard
You are mapping a pipeline's OT network. You have scan results showing multiple subnets, but the firewall rules are not available. You need to infer the logical topology. Which additional data source is most useful?
Select an answer first
34application · medium
After scanning a food processing plant, you have identified several PLCs, HMIs, and a historian. You need to create a logical map that shows the data flow. Which information is most useful?
Select an answer first
35application · medium
After scanning a wastewater treatment plant, an analyst has identified the following: a PLC at 10.0.0.5 with Modbus TCP port 502 open, an HMI at 10.0.0.10 with port 80 open, and a historian at 10.0.0.20 with port 1433 open. The analyst needs to create a logical map. Which relationship is most likely to be correct?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ICSSCADA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ICSSCADA” is a trademark of its owner, used for identification only.

Scanning and Enumeration ICSSCADA Practice Questions (Page 7)

Questions 31–35

During an assessment of a building automation system, you find a device on UDP port 47808. You need to enumerate the device's points and attributes. Which protocol should you use?

You are assessing a railway signaling system. A device on 192.168.10.50 responds to a TCP connection on port 4840 with a banner that includes 'OPC UA Server - Vendor: Siemens'. You need to identify the device's role in the signaling system. What is the best next step?

You are mapping a pipeline's OT network. You have scan results showing multiple subnets, but the firewall rules are not available. You need to infer the logical topology. Which additional data source is most useful?

After scanning a food processing plant, you have identified several PLCs, HMIs, and a historian. You need to create a logical map that shows the data flow. Which information is most useful?

Keep studying — Introduction to Hacking ICS/SCADA