After scanning a natural gas pipeline's OT network, you have a list of IP addresses, open ports, and service banners. You need to create a logical topology map. Which additional information is most critical to accurately map the network?

The physical location of each device

The vendor and model of each device

The network traffic flows between the discovered devices

The firmware version of each device

A wind farm's OT network is segmented into multiple VLANs. You need to identify active hosts across all segments, but the network team has only provided read-only access to the switch management interface. Which method is most effective?

Use a network tap on the core switch to capture traffic for 24 hours

Run a ping sweep from a single workstation on one VLAN

Perform a TCP SYN scan against all VLAN subnets from a laptop

Use the switch's ARP table and MAC address table to discover hosts on each VLAN

Which of the following is a typical output of network topology mapping in an ICS/SCADA assessment?

A diagram showing the connections between PLCs, RTUs, and the SCADA server

A report of known CVEs for each device

A list of open ports on each device

A list of user credentials found on the network

You have completed scanning and enumeration of a water utility's SCADA network. You need to document the findings for the engineering team. What is the most important element to include in the documentation?

A list of all open ports and services with the corresponding device IP addresses

The exact command-line syntax used for each scan

The names of the scanning tools used

The IP addresses of the scanning machine

EC-CouncilICS/SCADA Cybersecurity

Domain 3Objective 3

Scanning and Enumeration ICSSCADA Practice Questions (Page 9)

Part of the Introduction to Hacking ICS/SCADA domain, which makes up ~14% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–11 in this domain), expect 1–2 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

6concepts

Questions 41–45

41application · medium
After scanning a natural gas pipeline's OT network, you have a list of IP addresses, open ports, and service banners. You need to create a logical topology map. Which additional information is most critical to accurately map the network?
Select an answer first
42application · medium
A wind farm's OT network is segmented into multiple VLANs. You need to identify active hosts across all segments, but the network team has only provided read-only access to the switch management interface. Which method is most effective?
Select an answer first
43foundation · easy
Which of the following is a typical output of network topology mapping in an ICS/SCADA assessment?
Select an answer first
44foundation · easy
Which of the following tools is commonly used for banner grabbing in ICS/SCADA environments?
Select an answer first
45application · medium
You have completed scanning and enumeration of a water utility's SCADA network. You need to document the findings for the engineering team. What is the most important element to include in the documentation?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ICSSCADA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ICSSCADA” is a trademark of its owner, used for identification only.