Vulnerability Scanners ICSSCADA Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A security team at a manufacturing company has integrated its vulnerability scanner with a SIEM. The team wants to use this integration to improve the vulnerability management process. Which outcome is most directly supported by this integration?

   • AAutomatically patching vulnerabilities as soon as they are detected.
   • BCorrelating scan findings with intrusion detection alerts to identify exploited vulnerabilities.
   • CReplacing the need for regular vulnerability scans.
   • DEliminating false positives by correlating with log data.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A water utility has a legacy SCADA system with PLCs that are known to crash when receiving unexpected network traffic. The security team needs to identify vulnerabilities without risking an outage. Which approach should they use?

   • ARun an active vulnerability scan from the IT network during a scheduled maintenance window
   • BUse a full TCP port scan on all ICS subnets to map open ports
   • CPerform an authenticated scan using default vendor credentials
   • DDeploy a passive network monitoring sensor to analyze traffic and identify vulnerable services
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A security team at a water utility has integrated its vulnerability scanner with a CMDB and a ticketing system. The team wants to ensure that vulnerabilities on critical assets are remediated within a defined SLA. Which practice best supports this goal?

   • ACreate tickets only for vulnerabilities with a CVSS score of 9.0 or higher.
   • BExport scan results to a spreadsheet and manually track remediation dates.
   • CUse the CMDB to identify critical assets and set SLA-based ticket priorities for vulnerabilities affecting them.
   • DAutomatically create tickets for all vulnerabilities and assign them to the first available technician.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A pharmaceutical company's OT network has a mix of modern and legacy devices. The security team wants to run an active vulnerability scan but is concerned about false positives and device disruption. They have a maintenance window of only 2 hours each month. What is the best approach?

   • ARun a passive scan continuously and only use active scanning for confirmed issues
   • BRun a full active scan with default settings during the maintenance window
   • CRun a credentialed scan with safe checks and a limited port range during the maintenance window
   • DRun an active scan with aggressive timing to complete within the window
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A water treatment facility wants to identify vulnerabilities in its legacy PLCs and RTUs that cannot tolerate active probing. The security team needs a continuous view of the control network without sending any packets to the operational devices. Which scanner deployment approach should they use?

   • ADeploy an active scanner on a laptop connected to the control network and run credentialed scans during a scheduled maintenance window.
   • BConfigure a passive scanner to monitor a SPAN port or network tap on the control network and analyze traffic passively.
   • CInstall an agent on each PLC and RTU to collect configuration data and send it to a central scanner.
   • DUse an external cloud-based scanner to perform an unauthenticated scan of the control network over the internet.
   Reveal Solution Discussion Select an answer first