Vulnerability Scanners ICSSCADA Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A pharmaceutical company's OT network includes a mix of modern Windows-based HMI servers and legacy embedded controllers. The security team wants to run a vulnerability scanner but is concerned about the impact of active scanning on the legacy controllers. Which deployment strategy best addresses this concern?

   • AUse an active scanner with default settings on all devices, including the legacy controllers.
   • BDeploy a passive scanner on a SPAN port for the entire OT network and use active scanning only on the Windows-based HMI servers during a maintenance window.
   • CRun an active scanner from the IT network across a firewall to the OT network.
   • DInstall a vulnerability scanner agent on each legacy controller.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   An oil refinery uses a vulnerability scanner that is generating a high number of false positives on its HMI systems. The false positives are overwhelming the security team. What is the best way to reduce false positives?

   • ADisable the scanner and rely on manual assessments
   • BTune the scanner by excluding known-safe checks and adjusting detection thresholds
   • CIncrease the scan frequency to get more accurate results
   • DUse a different scanner that is known to produce fewer false positives
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   An ICS security analyst is tuning a vulnerability scanner for a mining operation's OT network. The network includes PLCs that are sensitive to broadcast traffic. The analyst wants to reduce the chance of causing a PLC to reboot or misbehave. Which scanner setting should the analyst adjust?

   • ASet the scanner to use a random source port for each probe.
   • BEnable TCP SYN scanning instead of full TCP connect scanning.
   • CDisable the scanner's ability to send broadcast or multicast probes.
   • DIncrease the scan timeout to allow more time for responses.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is the purpose of tuning a vulnerability scanner's false positive rate in an ICS/SCADA environment?

   • ATo reduce the number of incorrect alerts that waste analyst time
   • BTo make the scanner run faster by skipping checks
   • CTo ensure all vulnerabilities are reported, even if some are not real
   • DTo increase the number of vulnerabilities detected
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A vulnerability scan of an ICS network has produced a large report with many findings. The security manager wants to prioritize remediation efforts. Which approach is most effective?

   • APrioritize based on CVSS score alone and remediate the highest scores first
   • BIgnore scan results and rely on vendor security advisories
   • CFocus on vulnerabilities affecting critical assets that are internet-facing or have known exploits
   • DRemediate all vulnerabilities equally to ensure comprehensive coverage
   Reveal Solution Discussion Select an answer first