A chemical plant has a documented incident response plan, but after a recent malware outbreak on a control system, the team realized that they did not have a tested backup of the PLC configuration. The recovery took three days instead of the planned eight hours. Which control should be implemented to improve recovery time?

Establish a routine that automatically backs up PLC configurations and program files to a secure, offline repository, and test restoration procedures quarterly.

Increase the frequency of antivirus scans on the engineering workstations.

Add more firewalls between the IT and OT networks.

Require all engineers to attend a security awareness training session.

A power generation facility has implemented network segmentation and firewalls, but management wants to know if an attacker has already breached the OT network. Which detective control would provide the earliest indication of a breach?

Review firewall logs once a month for suspicious activity.

Implement a honeypot on the OT network to attract attackers.

Deploy a network intrusion detection system (IDS) on the OT network and configure alerts for known attack signatures and anomalous behavior.

Conduct a quarterly vulnerability scan of the OT network.

EC-CouncilICS/SCADA Cybersecurity

Domain 6Objective 4

Selecting and Applying Controls to Mitigate Risk ICSSCADA Practice Questions (Page 8)

Part of the Securing the ICS Network domain, which makes up ~16% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–13 in this domain), expect 1–2 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)

47questions here

10free pages

8concepts

Questions 36–40

36application · medium
A chemical plant has a documented incident response plan, but after a recent malware outbreak on a control system, the team realized that they did not have a tested backup of the PLC configuration. The recovery took three days instead of the planned eight hours. Which control should be implemented to improve recovery time?
Select an answer first
37foundation · easy
In an ICS, a technician uses a smart card and a PIN to log into an HMI. This is an example of which access control mechanism?
Select an answer first
38foundation · easy
Which control category is a security guard at the entrance to a control room?
Select an answer first
39foundation · easy
Which access control principle ensures that users are granted only the permissions necessary to perform their job functions?
Select an answer first
40application · medium
A power generation facility has implemented network segmentation and firewalls, but management wants to know if an attacker has already breached the OT network. Which detective control would provide the earliest indication of a breach?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ICSSCADA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ICSSCADA” is a trademark of its owner, used for identification only.

Selecting and Applying Controls to Mitigate Risk ICSSCADA Practice Questions (Page 8)

Questions 36–40

In an ICS, a technician uses a smart card and a PIN to log into an HMI. This is an example of which access control mechanism?

Which control category is a security guard at the entrance to a control room?

Which access control principle ensures that users are granted only the permissions necessary to perform their job functions?

A power generation facility has implemented network segmentation and firewalls, but management wants to know if an attacker has already breached the OT network. Which detective control would provide the earliest indication of a breach?

Keep studying — Securing the ICS Network