Visibility and Asset Awareness in an ICS Environment GRID Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A manufacturing plant has a flat OT network with hundreds of PLCs from multiple vendors. The security team wants to discover all assets quickly but is concerned about the impact of active scanning on production. Which tool is most appropriate for this task?

   • AShodan search for the plant's public IP range
   • BNmap with aggressive timing and OS detection
   • CA vulnerability scanner with default credentials
   • DA passive industrial protocol analyzer that listens to the network
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A mining company wants to discover assets on a network segment that contains a critical conveyor control system. The team is concerned about downtime. Which discovery method is most appropriate?

   • AUse Shodan to find devices on the same public IP range
   • BUse a passive network tap to observe traffic for a week
   • CRun a full Nmap scan with service detection
   • DDisconnect the conveyor system and scan it offline
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A water utility has an asset inventory that is updated only during annual audits. Recently, a new pump station was added and an old PLC was replaced, but the inventory was not updated. What process should the utility implement to maintain ongoing asset awareness?

   • AUse only passive network monitoring to detect new devices and update the inventory automatically.
   • BContinue with annual audits because they are sufficient to capture all changes.
   • CIntegrate the inventory with the change-management system and require updates whenever assets are added, modified, or retired.
   • DAsk vendors to provide updated inventory lists whenever they perform maintenance.
   Reveal Solution Discussion Select an answer first
5. 34expert · hard

   A power generation company is implementing a security monitoring program. They have identified three asset groups: turbine control systems, fuel handling systems, and administrative IT systems. The budget allows monitoring only one group initially. Which group should be prioritized?

   • AThe fuel handling systems, because they are upstream in the process.
   • BAll groups should be monitored equally because they are all part of the enterprise.
   • CThe turbine control systems, because they directly control the generation process and have the highest safety impact.
   • DThe administrative IT systems, because they are easier to monitor.
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A chemical plant has a legacy asset inventory that is stored in a spreadsheet and is known to be incomplete. The plant has a mix of Ethernet and serial devices, and some devices are in hazardous areas that are difficult to access. The security team needs to improve the inventory but has limited time and cannot shut down any processes. Which approach is most effective?

   • ARun an active scan with Nmap to identify all Ethernet devices and assume serial devices are unchanged.
   • BPerform a physical walk-down of all areas, including hazardous zones, to document every device.
   • CUse the vendor's default asset list for the plant's equipment and treat it as the inventory.
   • DCombine passive network monitoring with a review of engineering diagrams and purchase orders.
   Reveal Solution Discussion Select an answer first