Vulnerability Scanners ICSSCADA Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   After a vulnerability scanner identifies a vulnerability on an ICS/SCADA device, what is the next step in an effective vulnerability management workflow?

   • ARecord the finding in a remediation tracking system and prioritize it
   • BImmediately apply the vendor's patch without testing
   • CDelete the scan report to avoid false alarms
   • DIgnore the finding if the device is not internet-facing
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is a key advantage of passive vulnerability scanning over active scanning in an ICS/SCADA environment?

   • AIt eliminates the need for asset inventory
   • BIt provides more accurate vulnerability details
   • CIt does not generate additional network traffic
   • DIt can detect vulnerabilities in air-gapped networks
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   When deploying a vulnerability scanner in an ICS/SCADA network, which practice is most important to avoid disrupting critical processes?

   • AScan all devices with maximum intensity to get complete coverage
   • BRun active scans from the IT network across the DMZ
   • CSchedule active scans during peak production hours
   • DUse passive scanning or schedule active scans during maintenance windows
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A vulnerability scan of a wastewater treatment plant's SCADA network produced a large number of false positives, overwhelming the security team. The false positives are mostly due to the scanner detecting outdated software versions that are actually patched via vendor-specific hotfixes not recognized by the scanner. What should the team do to improve scan accuracy?

   • AIncrease the scan intensity to force the scanner to verify patches more thoroughly.
   • BCreate custom scan policies that exclude the affected devices from future scans.
   • CSwitch to a different scanner that uses only passive techniques.
   • DImport vendor-specific patch information or create custom detection rules to recognize the hotfixes.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   After a vulnerability scan, the security team identifies a critical vulnerability in a PLC. The remediation requires a firmware update that can only be performed during a plant shutdown. What should the team do?

   • AImmediately apply the firmware update during production hours
   • BDocument the risk, implement compensating controls, and schedule the update for the next planned shutdown
   • CDisconnect the PLC from the network until the update is applied
   • DIgnore the vulnerability because it is not exploitable
   Reveal Solution Discussion Select an answer first