EC-COUNCIL ICS-SCADA Online Practice Questions and Exam Preparation

EC-COUNCIL ICS-SCADA Online Questions & Answers

• Question 71:

  Which component of the IT Security Model is usually the least priority in ICS/SCADA Security?

  A. Integrity
  B. Confidentiality
  C. Availability
  D. Authentication
  B. Confidentiality

  ---

  Explanation

  In ICS/SCADA systems, the typical priority hierarchy of the IT Security Model components places Availability and Integrity above Confidentiality. This prioritization is due to the critical nature of operational continuity and data accuracy in

  industrial control systems, where system downtime or incorrect data can lead to significantoperational disruptions or safety issues. Confidentiality, while important, is often considered of lesser priority compared to ensuring systems are

  operational (Availability) and data is accurate (Integrity).

  References:

  National Institute of Standards and Technology (NIST), "Guide to Industrial Control Systems (ICS) Security".

• Question 72:

  Which of the following names represents inbound filtering?

  A. Funnel
  B. Sanity
  C. Egress
  D. Ingress
  D. Ingress

  ---

  Explanation

  Ingress filtering is a method used in network security to ensure that incoming packets are allowed or blocked based on a set of security rules.

  This type of filtering is often implemented at the boundaries of networks to prevent unwanted or harmful traffic from entering a more secure internal network.

  The term "ingress" refers to traffic that is entering a network boundary, whereas "egress" refers to traffic exiting a network.

  References:

  Cisco Networking Academy Program: Network Security.

  "Understanding Ingress and Egress Filtering," Network Security Guidelines, TechNet.

• Question 73:

  Which of the following are not a part of the temporal score in the CVSS? (Select all that apply.)

  A. Attack Vector
  B. User Interaction
  C. Reporting Confidence
  D. Remediation Level
  A. Attack Vector
  B. User Interaction

  ---

  Explanation

  The Common Vulnerability Scoring System (CVSS) provides a way to capture the principal characteristics of a vulnerability and produce a numerical score reflecting its severity.

  The temporal score in CVSS adjusts the base score of a vulnerability based on factors that change over time, such as the availability of exploits or the existence of patches.

  The temporal score includes:

  Remediation Level

  Report Confidence

  Attack Vector and User Interaction are part of the base score, not the temporal score, as they describe the fundamental characteristics of the vulnerability and do not typically change over time.

  References:

  Common Vulnerability Scoring System v3.1: Specification Document.

  "Understanding CVSS," by FIRST (Forum of Incident Response and Security Teams).

• Question 74:

  Which of the ICS/SCADA generations is considered monolithic?

  A. Second
  B. First
  C. Fourth
  D. Third
  B. First

  ---

  Explanation

  The first generation of ICS/SCADA systems is considered monolithic, primarily characterized by standalone systems that had no external communications or connectivity with other systems. These systems were typically fully self-contained, with all components hard-wired together, and operations were managed without any networked interaction.

  References:

  U.S. Department of Homeland Security, "Recommended Practice: Improving Industrial Control System Cybersecurity with Defense-in-Depth Strategies".

• Question 75:

  Which of the TCP flags represents data in the packet?

  A. RST
  B. ACK
  C. PSH
  D. FIN
  C. PSH

  ---

  Explanation

  The PSH (Push) flag in the TCP header instructs the receiving host to push the data to the receiving application immediately without waiting for the buffer to fill. This is used to ensure that data is not delayed, thus improving the efficiency of

  communication where real-time data processing is required. It effectively tells the system that the data in the packet should be considered urgent.

  References:

  Douglas

  E. Comer, "Internetworking with TCP/IP Vol.1: Principles, Protocols, and Architecture".