Vulnerability Scanners ICSSCADA Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A security team at a natural gas pipeline company has completed a vulnerability scan of its SCADA system. The scan identified 50 vulnerabilities across various assets. The team needs to prioritize remediation efforts based on risk to the pipeline's operation. Which approach should they use?

   • AWait for the next scheduled scan to see if the vulnerabilities persist before taking action.
   • BPrioritize vulnerabilities that affect internet-facing systems and those with known exploits, then map them to the assets that are critical to pipeline operations.
   • CFocus only on vulnerabilities with a CVSS score of 9.0 or higher, regardless of asset criticality.
   • DRemediate all vulnerabilities in the order they appear in the scan report.
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A security team has completed a vulnerability scan and identified several vulnerabilities. They need to track remediation efforts. Which practice is most effective?

   • ACreate a spreadsheet with all findings and update it manually
   • BWait for the next scan to see if the vulnerabilities are still present
   • CEmail the scan report to the IT team and ask them to fix everything
   • DUse the vulnerability scanner's built-in ticketing and tracking features
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A vulnerability scan of a transportation system's OT network identified a vulnerability in a traffic signal controller. The controller is connected to the internet for remote management. The scan also found a similar vulnerability on an internal maintenance workstation. Which finding should be prioritized?

   • AThe maintenance workstation because it is easier to patch.
   • BNeither because the vulnerability is not currently being exploited.
   • CBoth equally because they have the same vulnerability.
   • DThe traffic signal controller because it is internet-exposed and directly affects public safety.
   Reveal Solution Discussion Select an answer first
5. 34expert · hard

   A security team has a vulnerability management program that includes scanning, prioritization, and remediation. However, they are struggling to get operations to apply patches because of the risk of disruption. What is the most effective way to improve the program?

   • AEscalate all critical findings to senior management
   • BAutomatically apply patches without consulting operations
   • CWork with operations to develop a risk-based patch schedule that aligns with maintenance windows
   • DReduce the number of scans to lower the number of findings
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A vulnerability scan has identified a vulnerability in a PLC that is part of a batch process. The PLC is not internet-facing, but it is connected to the corporate network through a firewall. The security team has limited resources and must prioritize. What should they consider?

   • AThe PLC is not internet-facing, so the vulnerability is low priority
   • BThe risk depends on the firewall rules and the criticality of the PLC to the process
   • CThe vulnerability should be ignored because the PLC is not internet-facing
   • DThe vulnerability is critical, so it should be patched immediately
   Reveal Solution Discussion Select an answer first