Vulnerability Scanners ICSSCADA Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A security team has integrated its vulnerability scanner with a configuration management database (CMDB) to map findings to assets. The team wants to use this integration to improve remediation tracking. Which benefit does this integration provide?

   • AIt eliminates the need for manual verification of scan results.
   • BIt automatically patches vulnerabilities without human intervention.
   • CIt prevents all false positives by correlating with asset configuration data.
   • DIt allows the team to see which vulnerabilities affect critical assets and track remediation status per asset.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A security team has been tracking vulnerabilities in a SCADA environment using a spreadsheet. They are finding it difficult to keep up with the volume of findings and remediation status. What is the most effective improvement?

   • AContinue using the spreadsheet but add more columns
   • BIntegrate the scanner with a ticketing system that automatically creates and updates tickets
   • CReduce the frequency of scans to lower the volume of findings
   • DHire more staff to manage the spreadsheet
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A vulnerability scan identifies a missing security patch on a historian server. The patch is rated as critical by the vendor. However, the server is not directly accessible from the internet. How should the security team prioritize this finding?

   • AIgnore the finding because the server is not internet-facing
   • BEvaluate the exploitability and potential impact on the ICS environment before deciding
   • CTreat it as low priority because the server is not internet-facing
   • DTreat it as high priority because the patch is rated critical
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   When configuring a vulnerability scanner for an ICS/SCADA environment, which setting is most important to reduce the risk of disrupting critical devices?

   • AScan all ports on all devices simultaneously
   • BSet a low scan intensity and use safe checks
   • CEnable full port scan on all devices
   • DDisable timeout settings to speed up the scan
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   An ICS security analyst is configuring a vulnerability scanner for a manufacturing plant. The plant runs 24/7 and cannot tolerate any production disruption. The analyst needs to reduce the risk of false positives and avoid impacting operations. Which configuration should be applied?

   • AUse default scan profile with aggressive timing to complete quickly
   • BDisable all active checks and rely solely on banner grabbing
   • CSchedule scans during shift changes when production is briefly paused
   • DEnable safe checks and set a low scan intensity with extended timeouts
   Reveal Solution Discussion Select an answer first