Vulnerability Scanners ICSSCADA Practice Questions (Page 9)

Questions 41–45

1. 41expert · hard

   A vulnerability scan of a natural gas pipeline control system has identified a critical vulnerability in a remote terminal unit (RTU). The RTU is in a remote location and cannot be patched for 6 months. The security team must decide how to handle the risk. Which action is most appropriate?

   • AReplace the RTU immediately with a new model
   • BImplement compensating controls such as network segmentation and enhanced monitoring
   • CAccept the risk because the RTU is in a remote location
   • DDisconnect the RTU from the network until the patch is available
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   A vulnerability scan of a refinery's OT network identified a vulnerability in a tank gauging system that is connected to a business network for reporting. The same vulnerability exists on a standalone engineering workstation that is not connected to any network. Which finding should be prioritized?

   • AThe tank gauging system because it is connected to the business network and has a larger attack surface.
   • BThe engineering workstation because it is easier to patch.
   • CBoth equally because they have the same vulnerability.
   • DNeither because the vulnerability is not currently being exploited.
   Reveal Solution Discussion Select an answer first
4. 43foundation · easy

   What is the role of a vulnerability scanner in a broader vulnerability management workflow?

   • ATo serve as the sole source of risk assessment data
   • BTo provide the detection and reporting component of the workflow
   • CTo replace the need for a vulnerability management program
   • DTo automatically remediate all identified vulnerabilities
   Reveal Solution Discussion Select an answer first
5. 44expert · hard

   A regional electricity distributor has a highly segmented OT network with multiple legacy substation RTUs that cannot tolerate any active probing. The security team needs to identify vulnerabilities across all segments. They have a limited budget and cannot deploy a scanner in every segment. What is the most effective approach?

   • AUse a single passive sensor in the core and rely on it to see all traffic
   • BDeploy a single active scanner in the core OT network and scan all segments through firewalls
   • CDeploy passive sensors in each segment and aggregate the data centrally
   • DUse an active scanner with safe checks only, deployed in each segment
   Reveal Solution Discussion Select an answer first
6. 45application · medium

   A water utility wants to scan its OT network, which includes both a modern SCADA system and a legacy telemetry network using serial communications. The legacy network is connected via serial-to-Ethernet converters. The security team wants to identify vulnerabilities in both segments without disrupting the legacy telemetry. Which scanning approach should they use?

   • AScan the legacy network from the corporate IT network using a VPN.
   • BInstall agents on the legacy telemetry devices to collect data.
   • CRun an active scanner on the legacy network using a serial-to-Ethernet converter as a gateway.
   • DUse passive monitoring on the legacy network and active scanning on the modern SCADA network during a maintenance window.
   Reveal Solution Discussion Select an answer first