What is the purpose of mapping vulnerability scan results to ICS/SCADA assets?

To replace the asset inventory with scan results

To identify which specific devices or systems are affected by each vulnerability

To automatically patch all affected devices

To determine the network topology of the ICS

A vulnerability scan of a nuclear research facility's control system identified a high-severity vulnerability in a radiation monitoring system. The system is connected to the corporate network for data reporting. The same vulnerability exists on a standalone calibration device that is not networked. The facility has limited resources for remediation. Which vulnerability should be remediated first?

Neither because the vulnerability is not currently being exploited.

The calibration device because it is easier to patch.

The radiation monitoring system because it is network-connected and has a higher exposure.

Both at the same time because they have the same vulnerability.

After remediating a vulnerability, what is the next step in the vulnerability management workflow?

Report the remediation to management

Rescan the affected asset to verify the remediation

Update the asset inventory with the new patch level

An ICS security analyst is configuring a vulnerability scanner for a power utility's distribution network. The network contains a mix of modern Ethernet-based IEDs and older serial-to-Ethernet converters. The analyst wants to minimize the risk of disrupting operations while still obtaining useful vulnerability data. Which configuration should the analyst apply?

Run an unauthenticated active scan of all devices at maximum speed to get results quickly.

Use passive monitoring for the legacy serial-to-Ethernet segment and active scanning with reduced intensity for the modern IED segment during a maintenance window.

Enable full active scanning with default intensity and schedule it every hour during peak load.

Disable all scanning and rely solely on manual reviews of device configurations.

Which type of vulnerability scanner is most suitable for an ICS/SCADA environment where continuous monitoring is required but network traffic must not be disrupted?

Active scanner that sends probes to devices

Passive scanner that analyzes network traffic

Host-based scanner installed on each PLC

Web application scanner focused on HTTP services

EC-CouncilICS/SCADA Cybersecurity

Domain 4Objective 5

Vulnerability Scanners ICSSCADA Practice Questions (Page 4)

Part of the Vulnerability Management domain, which makes up ~14% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–11 in this domain), expect 1–2 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

5concepts

Questions 16–20

16foundation · easy
What is the purpose of mapping vulnerability scan results to ICS/SCADA assets?
Select an answer first
17expert · hard
A vulnerability scan of a nuclear research facility's control system identified a high-severity vulnerability in a radiation monitoring system. The system is connected to the corporate network for data reporting. The same vulnerability exists on a standalone calibration device that is not networked. The facility has limited resources for remediation. Which vulnerability should be remediated first?
Select an answer first
18application · medium
After remediating a vulnerability, what is the next step in the vulnerability management workflow?
Select an answer first
19application · medium
An ICS security analyst is configuring a vulnerability scanner for a power utility's distribution network. The network contains a mix of modern Ethernet-based IEDs and older serial-to-Ethernet converters. The analyst wants to minimize the risk of disrupting operations while still obtaining useful vulnerability data. Which configuration should the analyst apply?
Select an answer first
20foundation · easy
Which type of vulnerability scanner is most suitable for an ICS/SCADA environment where continuous monitoring is required but network traffic must not be disrupted?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ICSSCADA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ICSSCADA” is a trademark of its owner, used for identification only.

Vulnerability Scanners ICSSCADA Practice Questions (Page 4)

Questions 16–20

What is the purpose of mapping vulnerability scan results to ICS/SCADA assets?

After remediating a vulnerability, what is the next step in the vulnerability management workflow?

Which type of vulnerability scanner is most suitable for an ICS/SCADA environment where continuous monitoring is required but network traffic must not be disrupted?

Keep studying — Vulnerability Management