When interpreting vulnerability scan results in an ICS/SCADA environment, which factor should be considered FIRST when prioritizing which vulnerabilities to remediate?

The number of vulnerabilities on each asset

The order in which vulnerabilities appear in the report

The ease of exploitation and potential impact on safety

A regional electricity distributor must assess vulnerabilities across its substations. Some substations have modern IEDs that can be actively scanned, while others have legacy RTUs that are known to crash when probed. The security team has a limited maintenance window each month. What is the best scanning strategy?

Use only passive scanning at all substations and never perform active scanning.

Use passive scanning at all substations and supplement with active scanning of modern IEDs during the monthly maintenance window.

Deploy agents on all devices, including legacy RTUs, to enable continuous scanning.

Perform active scanning of all substations during the monthly maintenance window, including legacy RTUs.

After a vulnerability scan of a manufacturing plant's OT network, the report lists a critical-severity vulnerability on a PLC that controls a robotic assembly line. The PLC is running a legacy firmware version that is no longer supported by the vendor. The plant cannot shut down the line for a firmware update for another six months. What should the security team do first?

Replace the PLC with a new model that has supported firmware.

Ignore the finding because the PLC is legacy and the vendor no longer supports it.

Apply a virtual patch or add an intrusion prevention rule to mitigate the vulnerability while the line is running.

Immediately shut down the line and force the firmware update despite the production impact.

A vulnerability scanner is configured to scan a chemical plant's control network. The scan is causing network latency and affecting real-time control traffic. What should the administrator do?

Move the scanner to a different network segment

Disable the scanner and use manual checks

Reduce the scan intensity and schedule scans during low-activity periods

Increase the scan intensity to finish faster

What is the primary purpose of a vulnerability scanner in an ICS/SCADA environment?

To automatically patch known vulnerabilities on control system devices

To replace the need for manual security assessments

To identify known security weaknesses in systems and applications

To block malicious network traffic in real time

EC-CouncilICS/SCADA Cybersecurity

Domain 4Objective 5

Vulnerability Scanners ICSSCADA Practice Questions (Page 8)

Part of the Vulnerability Management domain, which makes up ~14% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–11 in this domain), expect 1–2 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

5concepts

Questions 36–40

36foundation · easy
When interpreting vulnerability scan results in an ICS/SCADA environment, which factor should be considered FIRST when prioritizing which vulnerabilities to remediate?
Select an answer first
37expert · hard
A regional electricity distributor must assess vulnerabilities across its substations. Some substations have modern IEDs that can be actively scanned, while others have legacy RTUs that are known to crash when probed. The security team has a limited maintenance window each month. What is the best scanning strategy?
Select an answer first
38application · medium
After a vulnerability scan of a manufacturing plant's OT network, the report lists a critical-severity vulnerability on a PLC that controls a robotic assembly line. The PLC is running a legacy firmware version that is no longer supported by the vendor. The plant cannot shut down the line for a firmware update for another six months. What should the security team do first?
Select an answer first
39application · medium
A vulnerability scanner is configured to scan a chemical plant's control network. The scan is causing network latency and affecting real-time control traffic. What should the administrator do?
Select an answer first
40foundation · easy
What is the primary purpose of a vulnerability scanner in an ICS/SCADA environment?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ICSSCADA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ICSSCADA” is a trademark of its owner, used for identification only.

Vulnerability Scanners ICSSCADA Practice Questions (Page 8)

Questions 36–40

When interpreting vulnerability scan results in an ICS/SCADA environment, which factor should be considered FIRST when prioritizing which vulnerabilities to remediate?

A vulnerability scanner is configured to scan a chemical plant's control network. The scan is causing network latency and affecting real-time control traffic. What should the administrator do?

What is the primary purpose of a vulnerability scanner in an ICS/SCADA environment?

Keep studying — Vulnerability Management